OAFE AND SECURE 


Get everyone involved in IT security, says Pete van 
De Gohm (left) of Enron Energy Services. Page 44 
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Boeing’s advanced research unit scopes out 
long-term technology trends. Page 70 


IT auditors face the derision and scorn of some techies 
but are vital to corporate performance. Page 50 
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| Spate of announcements cite customer 
demand, heat from brokerages and portals 


| BY MARIA TROMBLY 


Harris Bankcorp Inc. this week 


| becomes the first U.S. bank to 


| offer wireless service to its re- 


tail customers. And a slew of 


| its competitors are close be- 


| hind as wireless applications | 


; continue to build momentum 


THE FRENZIED PACE at Internet start-ups isn’t the ideal environment for | 
making long-term IT decisions, says Gordon Jones, CIO at Beyond.com 


DOT-COMS 
ON THE EDGE 


O WHAT'S IT LIKE TO BE an IT profes- 
sional at one of the growing number of 
cash-strapped dot-coms? Kim S. Nash 
talked to insiders and ex-employees and 
heard tales of budget crunches, staff departures 
and skimpy disaster-recovery plans. Not to 
mention the story of the rookie who strung the 
live cable to the Web server through a doorway, 
where (of course) someone tripped on it and... | 
Story begins on page 20. | 
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NEWSPAPER 


toward mainstream markets. 
And there’s another driver: 
competition. 


A number of brokerages, | 
including Charles Schwab & | 
| Co., Merrill Lynch & Co. and | 
ETrade Group Inc., as well as | 
portals such as Yahoo Inc., | 
| have begun or plan to offer fi- | 


nancial account aggregation, 


letting customers access their | 
accounts from all the financial | 


DEVELOPERS VOICE. 
NETSKEPTICSM 


| Scope of overhaul 
one reason for concern 


ClOs VEXED BY NEW LICENSING DEALS 


BY LEE COPELAND 


|} ORLAND( 


| Microsoft Corp. faced a daunt- 
ing task last week: persuading | 


6,000 developers to stick with 


| its tools for the next two years 
while it follows through on the | 
| thing of the past, with vendors 
| such as Oracle Corp. 

| and Microsoft 


Microsoft.Net vision. 
Most of the faithful at the 


| Microsoft Professional Devel- 
| opers 


Conference here 


peared to be 


massive overhaul 
Microsoft.Net, page 16 


ap- | 
dazzled by | 
| glimpses of the Microsoft.Net | 
| framework and accompanying | 
| tools. But they voiced skep- 
ticism about Microsoft’s abili- | 
| ty to execute a strategy that | 
| requires a 


| CIOs 


| benefits. 


institutions with which they 
do business. That’s 
threat to banks. 
“They have to offer wireless 
also or risk losing customers to 
ETrade,” said George Barto, an 
analyst at Stamford, 
based Gartner Group Inc. 
Online brokerages began of- 


a direct 


Conn.- 


Citicorp, New York: 
This summer 


lotte, N.C.: This summer 


Clarity Bank, Uvalde, 
Texas: Early fall 
Wachovia, Winston-Salem, 
N.C.: Early fall 


Fear long-term costs of 
finite-term contracts 


BY DOMINIQUE DECKMYN 
Buying software may soon be a 


Corp. 
starting to move cus- 
tomers to _ subscrip- 
tions and finite-term 
licenses. But some 
said they are 
alarmed at what these 
new arrangements 
could cost, despite the 


“Negotiating 
skills are crucial” 


U.S. BANKS JOINING 
WIRELESS GOLD RUSH 


fering customers wireless ser 
vices as long as three years ago 
but U.S. banks haven't felt the 
demand to offer bill payment, 
and other 
services over mobile phones 


balance inquiries 


and personal digital assistants. 


These days, though, about 309% 
Wireless, page 89 


IRIS SCANS TAKE 
OFF AT AIRPORTS 


Officials report no 
protests about eye ID 


| BY MICHAEL MEEHAN 


In one of the first public 
applications of eye-scanning 
technology, two airports this 
week will begin scanning pas- 
sengers’ irises as part of an ef- 
fort to streamline boarding and 
security processes. 

Using video cameras to scan 
the iris — the colored ring that 
surrounds the pupil in the hu- 
man eye — EyeTicket Corp. in 
Scanning, page 14 


Some worry about the risks 
of not having a perpetual li- 
cense. “It’s a terrible deal, be- 
cause at the end of your con- 
tract they could double the 
price,” said Rocco Esposito, IT 
director at Hunter Douglas 
Inc., a 14,000-employ- 
ee manufacturer of 
window coverings in 
Upper Saddle River, 
NJ. 

Analysts predict that 
subscription and term 
licenses will increas- 
ingly replace the tradi- 
tional perpetual soft- 

Licensing, page 14 
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Spate of announcements cite customer 
demand, heat from brokerages and portals 
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OPEN SAN SOFTWARE SOLUTIONS FROM WHO?!? 


Go ahead. Take a good look at Compaq SANworks: When the number one storage system 


provider and a leader in SAN solutions applies its open-computing expertise 
to create open storage solutions, it’s a sight to behold. 
Take it all in at www.compaq.com/sanworks 


COMPAG. 





REVENGE OF THE DOT-NOTS 


Stock-optionless companies are finding new ways to outcompete dot-coms for talent. Gary 
Habermann (below) at Widener University offers high-tech “toys” and free tuition. Page 42 


T WAYS TO HIRE 


NEWS 


4 COUNTERPANE OFFERS 


up to $100 million in insurance 
for e-commerce security 
breaches. 


6 ABA PANEL PUSHES for 
global laws to cover Internet- 
related disputes around the 
world. 


8 NAPSTER CASE RAISES 


important questions about lia- 
bility for end users and their 
employers. 


DISNEY ENDS controversy 


by agreeing to buy and retire 
Toysmart’s customer list. 


DOCTORS ARE venturing 
onto the Internet for research, 
but they still shy away from 
online communication, a study 
finds. 


12 SENATE RESCHEDULES 


antitrust hearing on online 
airline ticketing venture. 


24 PARLIAMENT SENDS safe 
harbor privacy agreement back 
to the European Union with 
criticism. 

28 ROLLS-ROYCE TAPS EDS 
for $2.1 billion outsourcing 
deal. 

29 J.D. EDWARDS UPDATES 
its network as it expands inter- 
nationally. 


SRN EIR ss, ars 4's <i a sod 
Stock Ticker 
Company Index 


BUSINESS = 


36 RIVALS TEAM UP to offer 


new integrated electronic 
derivatives exchanges 


38 OFFICER COMPARES her 


IT role in the Navy with that 
of a corporate CIO. 


39 ASPS ARE TURNING to 
other application service pro- 
viders, creating more opportu 
nities for failure, analysts say 
WORKSTYLES 


HECKLERS’ IT STAFF 


keeps busy, but, with a name 


like that, they have to have fun, 


the company’s CTO says 


DREAM SECURITY IS with- 


in your reach. It’s just going to 
take commitment, experts say 
AUDITORS DON'T have to 
be the enemy of IT workers. 
QUICKSTUDY 
STRUCTURED FINANCE 
may be the best bet for a com- 
pany with a credible business 
plan but poor credit. 


LER LAE ENR AO IM len IF 


OPINIONS 


30 MARK HALL argues that ven- 


dors make software licensing 
unnecessarily complex 

30 DON TAPSCOTT finds that 
the Internet is turning the 
world of marketing topsy- 
turvy. 

31. DON TENNANT says Larry 


Ellison is onto something after 


38 


60 


68 


70 


ue 


ae ORR OREM 


AN IT LEADER 


An attractive pay package alone won't bring 

in the IT executive you want. You have to think about 

such things as having top-level commitment to technology and providing 
adequate technological and financial support for IT to do its job. Page 48 
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TECHNOLOGY 


HACK OF THE MONTH 

LAST WEEK’S COLUMN on 
security vulnerabilities in Nap- 
ster missed important points. 


CONCORD communications 
has released a tool that com- 
bines network, systems and 
application monitoring. 

EXEC TECH 

ELECTRONIC whiteboards 
could one day be embedded in 
office equipment. 
QUICKSTUDY 
PROGRAMMING languages 
are keywords and systems of 
rules for communicating in- 
structions to a computer. 
FUTURE WATCH 

GAME MACHINES may 
compete for the market space 
where TV and the Internet 


might converge. 


MANY IT STORAGE profes- 


sionals are building the man- 
agement tools they need. 


BOEING’S ADVANCED 


research unit looks for and 
deploys new technology. 


Wee Diane Da WOU Sle So 


hiring ABC News technology 
correspondent Gina Smith to 
lead the charge for his New 
Internet Computer. 


JOHN GANTZ says IT orga- 
nizations that measure success 
in hiring people can have a leg 
up in the recruiting wars. 


WILLIAM M. ULRICH says 


IT organizations must not for- 
get legacy business rules in 
Web-based environments. 


This Week Online 


w This week, exclusively on Computer- 
world.com’s Careers Page, Congress- 
man Lamar Smith (R-Texas) discuss- 
es legislation he filed that would 
require H-1B visa holders to have 


c¢ lege degre es 


= Also, see Dominique Deckmyn’s 
Reporter’s Notebook from Microsoft's 
Professional Developers ¢ 
posted on our Windows 2000 Commu- 
nity Page. 


onference, 


@ And on the B-to-B/E-Commerce 
Community Page, Andrew Shen at the 
Washington-based Electronic Privacy 
Information Center, discusses the 
potential fallout surrounding Toys- 


mart’s plan to sell its customer lists. 


ALAN PALLER offers some 
questions IT organizations 
should ask of their informa- 


tion security officers. 


KATHLEEN MELYMUKA 


tells of a San Francisco pro- 
gram that helps women learn 
technology skills 


FRANK HAYES says that 
Microsoft's upcoming .Net 
means the end of the PC as 
we know it. 


www.computerworld.com 
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U.S. Reps Move to 
Limit Use of SSNs 


U.S. representatives said Friday 
that they plan to introduce a bill that 
would restrict government and busi- 
ness uses of Social Security num- 
bers, mirroring a similar proposal 
made in the Senate last month. The 
bills aim to curb identity thefts but 
could burden companies that rely on 
Social Security numbers for uses 
such as credit approval. 


WorldCom, Sprint 
Kill Merger Proposal 


WorldCom Inc. and Sprint Corp. last 
week said they would drop their 
proposed $120 billion merger. The 
U.S. Department of Justice's law- 
suit to block WorldCom's acquisi- 
tion of Sprint, along with opposition 
from European regulatory officials, 
made pursuit of the merger unrea- 
sonable, the two companies said. 


ee 


Auto Groups Sue to 
Sell Over Internet 


Two trade associations for auto- 
makers last week filed a lawsuit in 
federal court against the state of 
Arizona, seeking to block a dealer- 
franchise law that prohibits car 
manufacturers from selling directly 
via the Internet. The Alliance of 
Automobile Manufacturers and the 
Association of International Auto- 
mobile Manufacturers claim the law 
hurts consumers by restricting ser- 
vices automakers can offer online. 


Short Takes 


EUROPEAN UNION official Frits 
Bolkestein said he won't change his 
recommendation that “safe harbor” 
data-privacy rules be adopted as-is, 
despite a request for changes from 
the EUROPEAN PARLIAMENT (see 
related story, page 24)... . Ina sur- 
prise move, one week after warning 
that its second-quarter revenue and 
profits would be less than expected, 
INFORMIX CORP. ousted CEO Jean- 
Yves Dexmier and named board 
member Peter Gyenes his replace- 
ment. . . . Educational, financial and 
cultural barriers are keeping minori- 
ties and women out of high-tech 
jobs, a congressional commission 
said in a report last week. 


NEWS 


IBM’s Freeway Could 
Ease Software Costs 


Firm’s first 64-bit S/390 will enable 
per-processor, usage-based pricing 


BY JAIKUMAR VIJAYAN 

the technol 
improvements 
IBM’s 


Freeway 


OR ALI 
ogy 
expected in 
upcoming 
mainframes, the big 
impact on users will be from 
the changes they promise to 
bring to big-iron software pric 
ing models, analysts said. 
Freeway is the code name 
for IBM’s 64-bit S/390 
mainframes, which are expect- 


first 


ed to start shipping in the fall. 

The systems will have a per- 
formance of around 256 MIPS 
per processor, and a fully con- 
figured Freeway system will 
deliver around 3,000 MIPS of 
performance, according to es- 
timates by David Floyer, an an- 
alyst at [Tcentrix Inc., a main- 
frame consultancy in Moun- 
tain View, Calif. 


Freeway systems will com 


Insurer to Cover Losses From 


Lloyd’s of London backs Counterpane plan 


BY ANN HARRISON 

Businesses are insured against 
many types of disasters, so 
why not Internet security fail- 
ures, too? 

Counterpane Internet Secu- 
rity Inc. in San Jose announced 
ast week that it will offer as 
nuch as $100 million in insur- 
ince coverage to protect com- 
yanies against loss of revenue 
and information assets caused 
oy Internet and e-commerce 


security breaches 


Counterpane’s warranty of 
service is backed by Lloyd’s of 


London and underwritten by 
New York-based insurance 
oroker Frank Crystal & Co. and 
ondon-based Safeonline Ltd. 


Risk Control 


Other insurers offer policies 
that pay for losses under loss- 
of-business or act-of-vandal- 
ism clauses, but damages are 


bine better memory manage- 
ment with 


technology 


capabilities raw 
improvements 

such as support for more pro 
and faster intercon- 


nects between them — to de 


cessors 


liver double the performance 
of current Generation 6 S/39( 
mainframes, said Floyer. 

One of Freeway’s primary 
draws will be its ability to let 
work- 


loads to specific processors or 


users tie application 


sets of processors within a 
mainframe in a way that is ver- 
ifiable and measurable for both 
vendor and user, said one user 
who asked not to be named. 
Users have long complained 
that it’s unfair that capacity- 
based pricing 
them to pay for software based 
their 


models force 


on the size of overall 
mainframe complex rather than 


on its actual use (see chart). 


and 
$100,000. 
Counterpane said it’s the first 


often difficult to collect 


premiums begin at 


security services provider to of- 
fer guaranteed, direct financial 
reimbursement for security- 
related losses, for premiums of 
$12,000 to $20,000. 
Lloyd’s security in- 

surance covers the 
cost of repairing and 
replacing data or soft- 
ware following a se- 
curity attack. It also 
reimburses 


lost rev- 


enue following a ser- Law o 
SCHNEIER’S Coun- 
terpane is filling an 
insurance gap 


vice interruption and 
offers extortion pro- 
tection for payment 
of ransoms. 

“Until now, the insurance 


industry has not had sufficient 


assurance of risk control from | 
security companies,” said Bro- | 


nek Masojada, CEO of Lloyd’s 
insurer Hiscox PLC in London. 


IBM’s new mainframe tech- 
nology should help such users 
by letting them partition their 
mainframes into multiple serv- 
ers and run separate applica- 
tions on each partition 

Such clearly demarcated par- 
titions make it possible for ven- 
dors to charge for their soft- 


ware based on the portion of 


the mainframe it’s running on 

— and on the actual use of such 
software. The ability to mea- 
sure application usage will also 
facilitate 
pricing schemes in the future. 


more usage-based 


“In general, Iwould say 
these kinds of pricing models 
would be beneficial to 
users if they are implemented 
correctly,” said Ronald Theil- 
en, president of Share Inc., a 
user 


very 


large-system group in 
Chicago. 

Even so, a lot will depend on 
the willingness of independent 
software vendors to go along 
with such pricing schemes, 
said Rich Smrcina, a systems 
software specialist at 


Net Breaches 


“Now, Counterpane 
proven to us, through their 
Managed Security Monitoring 


has 


service, that they have sub- | 


stantially reduced their clients’ 
exposure to risk. This has al- 
lowed us to broaden the cover- 
age and increase the amount 
and availability of our insur- 
ance to Counterpane and their 
customers,” Masojada added. 


David Tapper, a 


research analyst at | 
Data 


International 
Corp. in Framing- 
ham, Mass., noted 
that a 
Counterpane’s com- 
petitors, including In- 
ternet Security Sys- 
tems Inc. in Atlanta, 


and IBM, have also 


formed partnerships | 
companies. | 
trend has | 
helped push the creation of in- | 


insurance 


said the 


with 
Tapper 


surable models of 
management. 


security 


Unlike other outsourced se- | 


Grede | 


number of 


Hewlett-Packard Co. | 
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There's Gotta 
Be a Better Way 


An example of why users 
want alternatives to capa- 
city-based pricing: 

= A user has three 
separate applications 
running on three separate 
100-MIPS mainframe systems. 


#With capacity- 
based pricing, moving 
the applications to a single 
larger 300-MIPS box will 
push license fees up on all 
applications. 


#Even though each 
application still con- 
sumes only 100 
MIPS, software vendors 
assess fees based on the 300 
MIPS of the overall box. 


Foundries Inc., a $600 million 
producer of metal castings in 
Milwaukee. IBM rival Amdahl 
Corp. in Sunnyvale, Calif., for 
instance, has been offering a 
similar capability with its Mul- 
tiple Server Facility for more 
than two years. But so far, few 
of the major independent soft- 
ware vendors have changed 
their pricing practices. D 


curity services that monitor 
only firewall or intrusion-de- 
tection systems, Counterpane 
offers managed, around-the- 
clock incident-response 
vices to help companies react 
to security incidents. 

Counterpane is built on the 
reputation of its founder, Bruce 
Schneier, a world-respected 
cryptanalyst. 


Method of Understanding 


Counterpane has two secure 
operations centers to monitor 
customers’ networks through 
encrypted tunnels. Probes on 
networks collect information 
from security products. 

Conxion Corp., an Internet 
service provider and Web host- 
ing firm in Santa Clara, Calif., 
pays Counterpane $150,000 per 
year to monitor its networks 
and is exploring the possibility 
of purchasing a policy. 

“Here is a method to under- 
stand how the premium struc- 
ture is going to work and how 
the risk factors are going to 
affect your data and informa- 
tion network,” said Mark 
Kadrich, director of security at 
Conxion. D 


ser- 
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Computer Associates. That’s who. 
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CA provides proven solutions 
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applications. 
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CA Rescue 
Program 


hostage by other tool vendors when CA c 


a Single vendor solution across a multiple 


database environment, complete with an 


aggressive value proposition and conver- 





sion services. Just send an e-mail to 





Backup and 


Administration Availability Recovery 


Streamline Reduce or eliminate Keep data secure and 


administration tasks downtime 


reliable 


Concurrently Perform online Recover specific 
manage multiple reorganization objects or entire 


databases 


databases 


Quickly load and 


Alter and migrate unload data 
database objects 


For more information on CA Solutions for DB2 for 08/390, 
Call 1-800-850-7528 Ext. 100, or visit www.ca.com 


Maintain business 
profitability 


rescueprogram@¢ 
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Application 
Development 
Accelerate 
development cycles 


integrate legacy data 
with new applications 


Generate error-free 
SQL code 
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Performance 
Management 


Monitor critical 
resources 


Improve 
data 
retrieval 


Optimize database 
tuning efforts 
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Retailers Pick Team 
For Online Market 


But analysts warn that challenges remain 


BY CAROL SLIWA 
HE WORLDWIDE Re 
tail Exchange an 
nounced last week 
that IBM, i2 Tech- 
nologies and 


Ariba Inc. will help build, op 


Inc. 


erate and host the online mar 
ketplace where ex 
change members plan 
to purchase goods and 
supplies and collabo- 
rate on supply-chain 
issues 
Launched in _ late 
March, the 


eventually 


venture 
could be 
come one of the larger 
business-to-business 

marketplaces, given that its 22 
members include major retail- 
Albertson’s Inc., 
Best Buy Co., CVS Corp., J. ¢ 

Penney Co., Kmart Corp., Rite 


ers such as 


Aid Corp., Safeway Inc., Target 
Corp. and Walgreen Co. 

that the 
Exchange 


But analysts 
WorldWide Retail 
effort a competitor to the 
GlobalNetXchange that Sears, 
French 
grocer Carrefour SA launched 


warn 


Roebuck and Co. and 


this year faces an array of 
challenges, from getting differ 
ent technology partners and 
products to work together to 
getting data to flow into dis 


parate back offices 


Integration Problems 


“The problem is the integra 
tion 


There are a lot of moving 
parts in th 

this 
Pierre Mitchell, an analyst at 
AMR 


Inc. “The other is you're going 


e technology stack 


within exchange,” said 


Boston-based Research 


to have to get the technology 


partners to work comfortably 
together.’ 

IBM will do the hosting and 
systems integration, and Dal- 

and Mountain 
based Ariba will 
bring several applications to 
the table. 


las-based  i2 
View, Calif 
*lans also call for 
products from Syncra Systems 
Inc., ViaLink Co., QRS Corp. 
and Retek Inc. to be used. 
“Even with a good set of 
hosted, integrated applications 
to power the exchange, you 


STORCH SEES 
“enormous” po- 
tential savings 


still need to integrate it into 


the back office, and the back 
office is ugly for retailers,” said 
Mitchell. “They 


frame-based 


have main- 
merchandising 
systems and a hodgepodge of 
other legacy applications and 
custom applications.” 

Despite the chal 
lenges, member retail- 
ers have high hopes 
that “virtually all” of 
their transactions will 
go through the ex- 
*hange within three to 
ive years and perhaps 
sooner for some, said 
Jerry Storch, president 
of financing and new 
services at Minneapolis-based 
Target. 

Storch said the biggest sav- 
ings will come from removing 
supply-chain inefficiencies. 

One key benefit of sharing 
information will be compress 


ing design-to-production cy 
“We work like 
crazy now just to shave a week 


cles, he said. 


or two off,” Storch said. “If we 
could shave a month, you'd 


save an enormous amount of 


money.” 

Members of the WorldWide 
Retail Exchange plan to launch 
the exchange in phases. 

Within 30 days, the group 
will and 
will start to put together tools 


introduce auctions 


for electronic procurement 
and supply-chain applications 

Within 
tive planning and forecasting 
needs will be addressed. 

More 
tomization capabilities a 
in 180 days. 

Analyst Andrew 


90 days, collabora- 


sophisticated cus- 


re due 


Bartels at 
Cambridge, Mass.-based Giga 
Information Group Inc., said, 
“It’s absolutely unrealistic to 
expect that 100% of a compa 
ny’s transactions are going to 
market 


go through these 


places.” He said some compa 


nies will still prefer bilateral 
systems for security and dedi- 
cated phone lines to ensure 
that ail 
through. 

The members of the World- 
Wide Retail Exchange chose 
the IBM/i2/Ariba 
close call over Andersen Con 
sulting Group, Microsoft Corp. 


transactions go 


team in a 
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and Commerce One Inc 

“The breadth and scope” of 
products offered by IBM, i2 
and Ariba influenced the 
group’s decision, said Patrick 
Steele, who is the executive 
vice president of information 
and technology at Albertson’s 
and the head of the exchange’s 
technology committee. D 


ACLU Fights Fed E-Mail Scans 


BY ANN HARRISON 
The American Civil Liberties 
Union (ACLU) is calling on 
Congress to update federal pri- 
vacy laws and ban what it says 
is the potential for large-scale 
scanning and analysis of e-mail 
by the FBI’s Carnivore e-mail 
interception program. 

While the FBI says Carni- 


vore can target the traffic of 


just one individual, critics say 
the potential for abuse is high 
because it’s attached to an 
Internet service provider’s net- 
work and can analyze all traffic 
as it passes through. 

Carnivore is permitted by a 
litle If court order that allows 
the FBI to intercept the con- 
tents of electronic communi 


ABA Panel Calls for Global Internet Laws 


Says laws must 
cover all nations 
for Net to thrive 


BY TODD R. WEISS 

Association 
week 
world 


An American Bar 


(ABA) 


laws 


committee last 


said around the 
need to be unified to give the 
Internet a solid legal structure 
for e-commerce transactions. 

4 100-member ABA 
mittee that has spent two years 


com 


reviewing online legal and ju- 
risdictional questions issued a 
report recommending the for- 
mation of a “global online stan- 
dards commission” that would 
establish a legal framework for 
the future of e-commerce and 
oversee international Internet 
disputes. 

Mike Parris, a spokesman for 
Ford Motor Co. in Dearborn, 
Mich., said global online laws 
would be helpful for 
sumers and for Ford as it con- 


con- 


siders selling automobiles and 
trucks via the Internet. 

“IT think you'd find us sup- 
porting some form of stan- 
dardization certainly,” Parris 
said. “It’s wild out there.” 

Al Manning, 
for the Washington-based 
ABA, said the report from the 


group’s Global Cyberspace Ju 


a spokesman 


risdiction Project shows that 
new legal structures are need 
ed to keep up with changes in 
technology 

“The 
system is based on geography,” 


current jurisdictional 


so each country’s laws end at 
its borders, Manning said. The 


Internet, however, “is not 
based on geography,” he added. 

The first step to maintaining 
legal rights and responsibili- 
ties in an e-commerce world is 
through the creation of world- 
wide standards, Manning said. 


Edward Black, president of 


the Computer & Communica- 
tions Industry Association, in 
Washington, said the idea is 
right for the times. “We know 
the old 
we're in a 


we’ve somewhat left 
world and new 
world,” Black said. “I think we 
would approach it with inter 
yet with 


est and curiosity, 


reservation and restraint.” D 


cations of a specific person. In- 
vestigators can also get a tap- 
and-trace or pen-register order 
to collect the “numbers” relat- 
ed to communications to and 
from the suspect. 

But unlike a conventional 
phone wiretap that gathers just 
phone numbers, this type of 
surveillance on the packet- 
switched Internet allows the 
gathering of e-mail addresses, 
e-mail header information and 
other data, including Internet 
dial-up 
numbers and e-mail logs. 

“There isn’t any clear law 
that authorizes tap-and-trace 
devices to the Internet, and 
even when they have an order 
to get the content of the infor- 
mation, there is certainly no 
law that allows them to attach 
devices to an ISP’s network to 
filter all 
said Barry Steinhardt, associ- 
ate director of the New York- 
based ACLU. 

Steven Berry, an FBI super- 
visory special agent, said Car- 
limits viewable 


provider addresses, 


communications,” 


nivore mes- 
sages to only those included in 
a court order. The bureau says 
Carnivore has been used in 
fewer than 100 criminal cases 
in the past 18 months. “It is a 
very surgical tool and offers 
extreme those 
communications that are sub- 
ject to Berry 
said. “The tool is necessary to 
meet the stringent require- 
ments of federal wiretapping 


precision on 


interception,” 


statutes.” 

But Susan Landau, a senior 
staff engineer at Sun Microsys- 
tems Inc. and co-author of the 
book Privacy on the Line: The 
Politics of Wiretapping and En- 
cryption, said the FBI is trying 
to apply an old law to new 
technology that carries more 
information and has greater 
potential impact on_ users. 
“What we are relying on is the 
FBI not saving the information 
even if it sees it.” D 
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Compaq, Seagate 
Face Disk Drive Suit 


Convolve Inc., a New York-based 
maker of patented motion control 
technology, and MIT filed a lawsuit 
last week seeking $800 million in 
damages against Compaq Computer 
Corp. and Seagate Technology Inc. 
The lawsuit alleges that Houston- 
based Compag and Scotts Valley, 
Calif.-based Seagate misappropri- 
ated Convolve’s Input Shaping tech- 
nology, which allows disk drives to 
run more efficiently and quietly. 
Input Shaping was created by Con- 
volve using patented technology 
under license from MIT. 


Motorola Profits Lag; 
Revenue Accelerates 


Motorola Inc., the world’s No. 2 
cellular phone maker and sixth- 
largest semiconductor company, 
said second-quarter net income 
fell to $204 million, or 9 cents per 
share. In the same period a year 
ago, net income was $255 million, 
or 12 cents per share, adjusted for 
a 3-for-1 stock split. Sales rose 
22% to $9.26 billion, up from 
$7.6 billion last year. 


Dell Shuts WebPC Line 


Dell Computer Corp., in response to 
disappointing sales of its consumer- 
only WebPC line, halted sales of the 
machines just seven months after 
their introduction. The three-model 
line was the Round Rock, Texas- 
based business PC maker's first 
purely consumer-oriented PC. 


Aspect Stock Plunges 


Shares in Aspect Communications 
Corp., the San Jose-based maker 
of customer service software, 
plunged after the company warned 
that second-quarter profits would 
fall short of expectations and suf- 
fered two downgrades of its stock. 


New Export Controls 


The U.S. Senate last week voted 
86-11 to cut the time it takes to ap- 
prove new export controls for high- 
performance computers from six 
months to 60 days. It mirrors a 
similar vote by the House in May. 


| — and potentially for their em- | 





Are Employers Liable 
For Use of Napster? 


Sharing music at work ill-advised, but 
copyright suits unlikely to extend to users 


BY PATRICK THIBODEAU 
LAN RHEA, an in- 
formation systems 
director at US. 
Diamond Wheel 
Co., said he doesn’t 

want his end users installing 

Napster software 


Inc.’s on 


their computers. Its file-shar- | 
| Chicago. Regardless, it’s im- 


ing technology poses a securi- 
ty risk, and personal use of 
work computers violates com- 
pany policy. 

But, otherwise, Rhea said, he 
loves Napster. 
home PC, Rhea 


From his 


said, he uses Napster to listen to | 


new artists and to track down 
hard-to-find 
digital recording of the first 45 
RPM record he ever bought — 
“Tell Her No” by The Zombies. 

“I think Napster is one of the 
best promotion tools that ever 
came out of the Internet for 
music, and it’s a shame that 
you got some people driving 
Lamborghinis saying that it’s 
going to make them paupers,” 
said Rhea, whose Oswego, IIl.- 
based company makes abra- 
sive products. 

San Mateo, Calif.-based Nap- 


| ster may soon be shut down if 


San Francisco Federal District 
Judge Marilyn Patel agrees to a 
preliminary injunction sought 
by the recording industry. A 


hearing is scheduled for July | 


26. Napster has argued that its 
users are simply — and legally 
— “sharing” music for person- 


al use. But the Recording In- | 


dustry Association of America 


which is representing the ma- | 
jor record labels in court, says | 


Napster is helping users vio- 
late copyright law. 


Potential Liability 
This battle has created a le 
gal gray area for Napster users 


ployers as well. If employees 


use work computers to down- | 
| load copyrighted digital re- 


cordings, employers could be 


| dragged into a lawsuit if record 
| labels start suing some of Nap- 


| ster’s 20 million users, said | 


music such as a | 


several 
attorneys. 
But even if the record labels 
could legally justify suing end 
users, the record companies 
“would hard-pressed 
hold an employer liable,” said 


be to 


Jeffery Lewis, an attorney at 
Gordon & Glickson LLC in 


portant for companies to have 


intellectual-property | 


| METALLICA’S LARS ULRICH (left) 
| appeals to Napster CEO Hank 


rules and policies on equip- | 


ment use in place, he said. 


However, legal experts said 


they don’t believe the record- 
ing industry will start alien- 


Barry at a Senate hearing 


ating its customers. 


“The music industry would | 


be insane to sue individuals... 
[but] that doesn’t mean they 
might not be insane,” 
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Albertson PLC. 
Congress has begun probing 


issues raised by Napster and 
businesses such as MP3.com 
Inc. in San Diego. 

At a U.S. Senate Judiciary 
Committee hearing last week, 
Metallica drummer Lars Ul- 
rich derided Napster for vio- 
lating copyrights. At the same 
hearing, Roger McGuinn, for- 
merly a member of the folk 


| rock group The Byrds, praised 
| MP3.com, and Internet down- 


loads in general, for exposing 
more people to his music. 

But Gene Hoffman Jr., pres- 
ident, CEO and founder of 
EMusic.com Inc. in Redwood 
City, Calif., which sells digital 


| music online, said the compa- 


ny has seen its stock value 
plunge from more than $20 per 
share to around $2 per share 


| because of Napster. “[Inves- 
said at- | 
torney James Burger at Wash- | 
ington-based Dow, Lohnes & | 


tors] are afraid that Napster 
will validate the concept of not 
paying for music,” he said. DB 


New Domains May Bring New Problems 


BY PATRICK THIBODEAU 
A plan to expand generic top- 
level domains beyond the fa- 


| that 


miliar .com, .net and .org may | 


be a mixed blessing for busi- 
nesses. 

The Internet Corporation 
for Assigned Names and Num- 
bers (ICANN) — a Marina del 
Rey, Calif.-based nonprofit or- 
ganization that’s responsible 
for administering the domain 


| name system — was expected 


to consider adding new top- 
level domains at a meeting due 


to wrap up early this week in | 
Name Game 


But the importance of a | 


Yokohama, Japan. 

New domains — especially 
generic domains such as .shop 
— would mean that companies 


Domain Facts 


There are seven top- 
level domains: .com, .net, 
org, edu, .int (for interna- 
tional organizations), .gov and 
mil (for military services). 


domains, such as .us for 
the United States. 


now have to deal 


| er, certainly,” said Sally Abel, 
| an intellectual-property attor- 


ney at Fenwick & West LLP in 
Palo Alto, Calif. 
On the other hand, businesses 


that have lost out on getting | 
| the 
| have anew shot at an attractive | 


best .com names would 


| name ina different domain. 


| catchy or simple-to-remember 
| domain name in establishing a 


business is debatable, said Gary | 


Szenderski, a senior partner at 


brand development and adver- 


tising firm Szenderski Rohani 
Worldwide in Irvine, Calif. 


“A brand is only as good as 


what’s behind the name,” said 
Szenderski. “[Companies] that 


have established .coms are go- | 
| lectual Property Organization 


ing to remain established.” 
Observers said ICANN also 
may introduce a series 
“chartered,” or closed, do- 
mains that limit registrations 
to specific companies or orga- 
nizations — like .airline, for 
example. These domains would 
be limited in much the same 


with | 
.com cybersquatters would | 
have a lot more virtual territo- | 
ry to worry about. That pros- | 
pect “is something that’s the | 
| nightmare of every brand own- | 


| marks from 


of | 





way .edu has been restricted to 
educational institutions. 

But closed domains could 
raise other issues. For example, 
the Labor Policy Association 
Inc. in Washington, which rep- 
resents human resources exec- 
utives at major corporations, 
has sent a letter to ICANN op- 
posing the introduction of a 
union domain. The group 
claims that the domain could 
confuse employees and lead 
them to believe they’re being 
represented by unions formed 


by their companies. But propo- 
| nents say a .union domain such 


as Nike.union or Microsoft.- 
union could help foster com- 
munication among workers. 
Trademark protection re- 
mains a major issue for ICANN. 
The group has tried to make it 
easier for firms to take trade- 
cybersquatters 
through its Uniform Domain- 
Name Dispute-Resolution Pol- 
icy. The policy provides a 
mechanism for the World Intel- 


in Geneva to use in arbitrating 
domain name disputes. But the 
system works only after trade- 
mark infringement is alleged. 
So far, ICANN’s members 
have been unable to agree on 
an alternative plan to provide 
trademark protection. D 
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Disney: We ll Retire Toysmart Customer List 


BY JENNIFER DISABATINO 
On the heels of a federal law- 
suit filed against Toysmart.com 


Inc., The Walt Disney Co. said it 


\ctive 


eBusiness Integration 


at the 


Spee d of Change 


—_—_—_—_— 





formation in violation of the 
privacy policy that appeared 
on the company’s Web site. 
Toysmart hasn’t yet received 
Commission (FTC) filed suit | a formal offer from Disney 


to buy the list, said Alex M. 
Rotolakis, a Boston-based at- 


will offer to buy the customer ast week, the Federal Trade 
list of the failed online toy re- 
tailer to maintain the privacy of 
the Web site’s customers. 


to stop Toysmart from selling 


its customer list and related in- 
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torney at the law firm Hanify & 
King PC, which is handling 
the bankruptcy proceedings for 
Toysmart. 

Disney, which owns 60% of 
the retailer, said in a press re- 
lease that it plans to retire the 
list to protect customers’ pri- 
vacy. “Ultimately, it’s probably 
a cheap way for Disney to save 
face” on its failed investment 
in Toysmart, said Alan Alper, 
an analyst at Gomez Advisors 
Inc. in Lincoln, Mass. 

Customer information for 
the includes the names, 
addresses and ages of cus- 
tomers and their children 

Frank Prince, an analyst at 
Forrester Research Inc. in 
Cambridge, Mass., said the 
FTC is likely to take a hard 
stance on the issue. 


Ground Rules Needed 


“There is considerable senti- 
ment in the privacy advocacy 
community that the privacy 
guarantees that are currently 
in place are often not hon- 
ored,” said Prince. He said he 
believes the Toysmart case will 
become “pivotal” in establish- 
ing ground rules for privacy, 
because it should determine 
“whether the letter of the con- 
tract as opposed to the spirit of 
the contract will be honored.” 

The controversy over the 
proposed sale began early this 
month when Truste, a San Jose- 
based organization that signs 
up companies that agree to ad- 
here to a set of online privacy 
guidelines, said it planned to 
submit a legal brief asking the 
bankruptcy court in Boston to 
withhold its approval for the 
proposed sale. 

Truste officials regis- 
tered a complaint with the 
FTC, which triggered the com- 
mission’s investigation. Truste 
had licensed Toysmart to put 
the Truste privacy seal on its 
Web site, provided that the 
Waltham, Mass.-based com- 
pany never divulged customer 
information to a third party. 

Disney said it’s willing to 
buy the list subject to the ap- 
proval of the bankruptcy court. 
If Disney isn’t allowed to buy 
the list, the company said it 
will urge the court to permit a 
sale only to a buyer that would 
maintain the confidentiality of 
consumers who submitted per- 
sonal information to Toysmart. 

FTC spokesman Eric Lon- 
don wouldn’t comment on the 
suit or any investigation but 
did say negotiations with Toys- 
mart are continuing. D 


site 


also 
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NEWS 


Doctors Go Online for 
Research, Little Else 


Many question savings potential, 
hesitate to communicate via Internet 


BY JULEKHA DASH 
NLINE HEALTH 
firms are in- 
creasingly tar- 
geting physi- 
cians with new 
services. But are doctors likely 
to catch Web fever? 

It depends on the type of ser 
vice companies offer, accord 
ing to a survey of 250 primary 
care physicians released last 
week by Ziment, a New York- 
based market research firm. 
The study found doctors are 
more likely to use the Web for 
gathering information about 
drugs and medical treatments 
than for communicating with 
patients, writing prescriptions 
or filing insurance claims. 

Less than one-third of the 
doctors surveyed said they be- 
lieve the Internet will save the 
health industry 
over the next five years. And 


care money 
less than half said they believe 
it will improve communica- 
tion between physicians and 
patients. 


Killer Apps 

But physicians did express 
significant 
developing technologies. 41% 


interest in two 
said they were very interested 
in using the Internet to prac- 
tice medicine remotely, such as 
through an audiovisual link. 
And when asked to name the 
“killer app” that could most 
transform the practice of med- 


Cyberdoctors 


Services that selected online 
health companies offer: 


TriZetto Group Application 


hosting, Web portal, online 
content, e-commerce, admin- 
istrative tasks 


Medem Online content, 


secure messaging under way 


Healtheon/WebMD Online 


prescriptions, lab orders, 
claim submissions, continu- 
ing medical education 


icine or improve the quality 
of care, 21% said “online access 
to medical records.” 

Talbert Medical 
Mesa, Calif., 
Newport Beach, Calif.-based 
The TriZetto Group Inc. for a 
number of online health ser- 


Group in 


Costa relies on 


vices, such as Web hosting and 
Internet portal development. 

But Dr. John Jacomo, a fami- 
ly practice physician affiliated 
with Talbert, said he is skepti 
cal because some patients may 
send e-mail to doctors “when 
they should cal] 911.” 

Health care analysts say on- 


line health applications will 
gain converts among physi 
cians if they save time and 
money 


“It’s difficult to get physi- 


cians to adopt [technology] if 


it doesn’t support their prac- 


tice” or clinical work, said 
Doug Johnston, an analyst at 
Forrester Research Inc. in 


Cambridge, Mass. 


The Voice of Authority 
Physicians that 


while they use a variety of on 


also said 
line health content providers, 
they generally rely more heav- 
ily on content that has been 
reviewed by an authoritative 
medical body. 

Dr. Marc Lowen, an obste- 
trician/gynecologist at a five- 


physician practice in Balti- 
health content 
service San 
based Medem Inc. (which last 
week announced it will out- 
source its Web hosting to 
Beltsville, Md.-based 
Inc.) partially 
backed by a number of medical 
societies, including the Ameri 


more, uses a 


from Francisco- 


Digex 


because it’s 


can Medical Association. Lo- 
wen said the fact that Medem 
prescreens its health informa- 
tion saves him time. 

“I spend a lot of time during 
office hours making sure that 
the information [patients are] 
getting is appropriate,” said 
Lowen. 

Time savings were also be- 
hind WellStar Health System’s 
decision to purchase a physi- 
cian practice management sys- 
tem from Atlanta-based Info- 
Cure Corp. for more than 250 
physicians. 

After products 
from about a half-dozen online 
vendors of health-related ser- 
vices, the Atlanta-based health 


reviewing 


Senate Studies Airline E-Ticketing Venture 


Critics: With most major U.S. carriers 
on board, Orbitz could turn into a cartel 


BY MICHAEL MEEHAN 
The U.S. Senate 

Committee has 
of Thursday for 


Commerce 
set a new date 
a planned 
hearing on potential antitrust 
issues involving the Orbitz on- 
line ticketing venture that’s be- 
ing funded by the nation’s five 
largest airlines. 

The hearing originally was 
scheduled to take place last 
month, but it was delayed after 
the announcement of a pro- 
posed merger between United 
Air Lines Inc. and US Airways 
Group Inc. — a deal that took 
higher priority on the Senate 
committee’s schedule. Orbitz 
is also being investigated by 
the U.S. Department of Justice. 

The Senate hearing will re- 
volve around questions such 
as whether United, American 
Airlines Inc., Continental Air- 
lines Inc., Delta Air Lines Inc. 
and Northwest Airlines 
should be able to band togeth- 
er to sell tickets in competition 
with existing online and brick- 


Inc. 


and-mortar travel agencies. 
Jeffrey Katz, who was hired 
earlier this month as president, 


CEO and chairman of Chicago- 
based Orbitz, is expected to 
testify at the hearing, although 
a final witness list hadn’t been 
time. Katz 
hasn’t discussed the antitrust 
accusations in a public forum. 
But Alex Zoghlin, chief tech- 
nology officer at Orbitz, last 
month said the company will 


released at press 


act like any other online travel 
agency that does business with 
multiple airlines 

Since the Commerce Com- 
mittee and the DOJ announced 
their separate probes of Orbitz, 
a second online venture fund- 
ed by many of the same airlines 
has announced its plans to 
challenge Priceline.com Inc. in 
ticket business. 
company, Hotwire, 
from Orbitz in that 
its airline investors only own 


the discount 
But that 
d i ffe rs 


nonvoting shares and aren't 


represented on its board of 


directors. 

Paul senior vice 
president of legal affairs at the 
American Society of Travel 
Agents Inc. (ASTA), which 
asked the government to inves- 


Ruden, 


tigate Orbitz, said he intends to 
testify at this week’s Senate 
hearing. Ruden said the Hot- 
wire plans only add to the 
ASTA 
members have about the new 
ticketing ventures. 

“We now have the major air- 


competition concerns 


lines moving jointly into every 


METS e a | 


OPEC of 
The Airways? 


What is Orbitz? ie travel agency 
5 five largest airlines 
rer 30 airlines have signed on as 

quity partners. A launch is expected 


this summe 


What's the problem? Opponents of the 
plan clair irlines will act as a cartel 
establishing their prices as a unit rather 
than as competitors, with higher prices to 


er being the end result 


What's the defense? Orbitz executives 
say the company’s main advantage will be 
technological superiority. They also say the 


airlines won't be able to collude on pricing 


What's at stake? Many other industries 
including automakers and meat packers 
are seeking to create similar online sales 
channels. Some see it as a cheaper way of 
moving products. The government even- 
tually must decide whether this type of 
e-commerce efficiency helps consumers 
or hurts them by eliminating the fundamen- 
tal premise of competition 
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Examining the Web 


What physicians use the 
Internet for: 
Gathering 
information 
about drugs 
Medical 
treatments 


75% 
68% 
20% 
19% 
12% 


Base: 250 primary-care physicians 


Communicating 
with patients 
Writing 
prescriptions 
Filing insurance 
claims 


care organization chose an ap- 
plication that allowed physi- 
cians to create ad hoc financial 
or clinical reports, according 
to Sally Eckford, director of 
physician information services 
at WellStar. 

Now, she said, “it takes about 
a month to get to all the report- 
ing requests.” D 


dimension of the marketplace,” 
Ruden said. “It has the poten- 
tial to create a cartel run by a 
concentrated few carriers.” 
Henry Harteveldt, an ana- 
lyst at Forrester Research Inc. 
in Cambridge, Mass., said he 
expects government officials 
to compare the organizational 
structures of Orbitz and Hot- 
wire as part of their investiga- 
tions. “At the very least, Orb- 
itz should be forced to reveal 
[details about the airlines’] 
ownership,” Harteveldt said. 
“Who owns what and how 
much? It never looks good 
when you hide anything.” 


Discounts a Key Issue 

Harteveldt added that ticket 
discounts will be a central 
issue in the Orbitz debate. If 
Orbitz can undersell its com- 
petitors or seeks to eliminate 
the discounts offered through 
competing channels, it could 
raise red flags, Harteveldt said. 

Analyst Fiona Swerdlow at 
Jupiter Communications Inc. 
in New York, said the real issue 
is that airlines have used tech- 
nology to become more ag- 
gressive about controlling the 
distribution channel for their 
tickets. 

“Any and every avenue the 
airlines will explore,” Swerd- 
low said. “Honestly, it’s just too 
early to tell what the effects of 
that will be.” D 
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NEWS 


Biometrics Meet 
Wireless Internet 


Unit will bring fingerprint IDs to handhelds 


BY JAIKUMAR VIJAYAN 
DENTIX IN( — a Mo 
torola Inc.-funded mak 
er of fingerprint identifi- 
cation 
week 


devices — last 
launched a 


sion that will offer biometric 


divi 


authentication services to wire 


Continued from page 1 


Scanning 


McLean, Va., will begin regis- 
tering passengers at Charlotte 
Douglas International Airport 
in North Carolina and Flug 
hafen Frankfurt Airport in Ger- 
has 


many EyeTicket 


been scanning Charlotte/Doug 


today. 


las airport employees and U.S 
Airways Group Inc. flight staffs 
since May 

The 
among the first major business 


airport rollouts are 


applications involving 
Until 
Bank United Corp. in Houston 


iris 
scan technology. now, 
had been engaged in the most 
notable business application of 
iris scans, observers said. 

In May last year, the bank 
converted three supermarket 
automated teller machines, at a 
cost of $5,000 each, to use the 
technology to identify cus 
tomers before they conducted 
Bank United re 
mains the lone player in its in 
dustry to go live with the tech 
nology Wong, an 
Mass. 


based Meridien Research Inc 


transactions 


said 


Judy 
analyst at Newton, 
The technology got its start 


in law enforcement. In 1996, 


Lancaster County Prison in 
Pennsylvania became the first 
correctional facility to use iris 
Warden Vincent A. 


Guarini said the facility some- 


scanning 


times needs to release prison- 
ers on short notice and can’t 
wait for fingerprint tests. 
Charlotte/Douglas aviation 
director Jerry Orr said his fa- 
cility agreed to test the iris 
scans, which translate the 266 
independent characteristics of 


less and Internet service pro 
viders 

The technology will allow 
customers of wireless services 
and products to authenticate 
their identities when conduct- 
ing electronic transactions, ac 
cording to Identix. 


the iris into a 512-byte digital 


code, for security purposes. 
Orr said reports from airport 
workers and flight crews have 
been positive. A 30 frame 


sec., black-and-white video 
camera is used to take a picture 
of the eye from 6 to 36 inches 
away. EyeTicket Chairman and 
CEO Mann 


scans aren't invasive like retina 


Stewart said iris 


scans, which use a laser to 


probe the He 
retinas change during a 


eye. also said 
per 
son’s life, whereas irises don't. 
Once U.S 
gers enroll, their codes will be 


future Mann 


Airways passen 


stored for use. 


Continued from page 1 


Licensing 


ware few 


few 


license in the next 


years. During the past 
years, several vendors includ 
ing Oracle have introduced 
licenses that are limited in time, 
and Microsoft joined that group 
on Friday by offering applica 
tion service providers monthly 
pricing options for all its soft 
ware. 

Software licensing is chang 
ing in other ways, too, with 
per-processor licensing on the 
rise and new 


many pricing 


models emerging. 

“What vendors are looking 
for is more predictable license 
revenue,” said Marie Reeve, an 
analyst at Stamford, 


based Gartner Group Inc. “A 


Conn. 


lot of users skip versions [of 


Office]. Microsoft is not seeing 

revenue from those customers 

in that period of time.” 
Subscriptions offer some ben- 


Services such as these will 
become increasingly crucial as 
wireless use and applications 
grow, said Jeff Keffler, an ana 
lyst at Lehman Brothers Hold- 
ings Inc. in New York. Lehman 
that 140 million 
handsets will be sold next year. 

Identix’s 
Itrust, will build both the hard 
ware and software for the fin- 


estimates 


new division, 


gerprint scanning devices that 


AN AIRPORT IN North Carolina 
and one in Frankfurt have begun 
using iris-scanning technology 


said he hopes airline passen- 
gers will be able to step in front 
kiosk, 


second 


of a terminal get 


scanned in one and 


efits for users. Gregor Bailar, ex 
ecutive vice president and CIO 
at Washington-based Nasdaq 
Stock Market Inc., said the mod 
el may ease administration. “My 
whole philosophy is, I want to be 
counting belly buttons,” he said. 
“Measuring how many people 
are using what and when is just 
not productive for us.” 

Rick Nolle, vice president of 
systems at Reinsurance Group 
of America Inc. in 
field, Mo., said he hopes that a 
self-updating version of Office 

“Td 


love for my Office users to re 


Chester 


will ease upgrade hassles. 
ceive automatic upgrades from 
Microsoft and have self-main 
taining systems,” said Nolle. 

But some CIOs and analysts 
see a trade-off: cost. 

Gartner estimates subscrip 
tion models cost corporations 
more in the long run. For in- 
stance, Oracle’s new term li- 
censes cost more than the old 
perpetual licenses after about 
five years, said Reeve. An Ora- 
cle executive said his company 


such 
will 


will be embedded in 


handheld devices. Itrust 
also bundle a range of valida- 
tion, transaction management 
and content protection 
based on the 
said CEO Jim Scullion. 

Transaction 
services can handle tasks such 
as maintaining audit trails to 
prove that a transaction did in- 


deed take place. Content pro- 


ser- 
vices devices, 


management 


tection services deal with the 
ability of users to control ac- 
cess to documents, limiting the 
time customers can have the 
documents on their systems 
and controlling whether they 
can download or copy them. 
Identix will partner with 


leading certificate authority 


then be issued a boarding pass 

process he expects to 

bring online within a year. 
Supporters of the scans say 


== 2 


the technology provides a way 
to identify people through a 
unique feature, since no two 
irises are the same. 


Kevin Mitchell, chairman of 


the Business Travel Coalition, 
which lobbies airlines and oth- 
ers on issues that affect business 
travelers, sees iris scans as a 
convenience, not an intrusion. 
“If you don’t feel violated in 
an airport today by all the 
questions and the searches, 
this isn’t going to make you 


is simply providing more 
choices and will offer perpet- 
ual licenses, if preferred. 
Microsoft’s move from con- 
current licensing to per-seat li- 
has rankled 


censing users. 


Concurrent licensing counts 
the number of users that ac- 
cess an application at the same 
time; per-seat licensing is per 
named user. When Global Ma- 
rine Inc. in Houston moved to 
Office 2000, it was forced to 
accept per-seat pricing, said 
CIO Dick Hudson. Microsoft 
was “able to raise a couple 
hundred thousand [dollars 
more] from us,” he said. 

Another option is a capacity- 
based per- 


which is 


model, such as 
pricing, 
used mainly for Internet appli- 
cations. Per-processor licens- 
ing resembles traditional main- 
frame licensing schemes. Al- 
though it can ease administra- 
tion, the software becomes 
more expensive when _ it’s 
moved to a bigger machine. 

Yet the new choices do offer 


processor 
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vendors to offer validation ser- 
vices for things such as digital 
signatures, Scullion said. The 
company will also license its 
technologies to other wireless 
providers for their 
handsets and networks. 

Identix’s move is representa- 
tive of the growing vendor in- 
terest in the biometric authen- 
market, Keffler said. 
Microsoft Corp., for instance, 
recently announced plans to 
develop such software tech- 
nology in partnership with I/O 
Software Inc., while big-name 
vendors such as Seimens AG 
and Sony Corp. are rushing to 
market with fingerprint scan- 
that can be embedded 
into handhelds, he said. D 


use on 


tication 


ners 


feel more violated,” he said. 

He said he thinks passengers 
will be willing to test the pro- 
grams for additional frequent- 
flier miles or other perks. 

Orr said the iris scans have 
other advantages. “Obviously, 
your eye’s pretty secure,” he 
said. “You always have it with 
you. You don’t have to worry if 
left it somewhere or if 
someone else is using it when 
they shouldn't.” 

Wong said she believes that 
biometric technologies will be 
adopted slowly. “It’s a lot of 
work to convert all those ma- 
chines,” she said. D 


you 


More Confusion? — 


Corporations face an increas- 
ing number of licensing 
options such as: 


D, 


Per-seat licensing: Increasing- | 
ly replacing concurrent user 
licensing 

Capacity-based licensing: 
Microsoft is implementing 

it; Oracle already uses it 


Rental, subscription or term 
licenses: Analysts say this 
method will prevail 
Pay-per-use: Popular with 
some ASPs; offered by ERP 
vendors like SAP 

Business metric pricing: Used 
by SAP in vertical markets 


an opportunity to simplify soft- 
ware management and possibly 
save money. 

“Negotiating skills are cru- 
cial,” said Bob Schwartz, vice 
president and CIO at Mat- 
sushita Electric Corporation of 
America in Secaucus, N.J.D 
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THE FUNDAMENTAL ELEMENT FOR THE WORLD’S FASTEST NETWORKS. 


Foundry Networks introduces a new fundamental element in the Internet and metropolitan service 
provider universe — the Netlron Internet backbone router family. NetIron scales to 172,000,000 
packets per second routing: performance and 480 Gigabits per second switching capacity in-a 

single system, making it one’ of the fastest backbone routers in the world. Its high density 
optical networking capabilities range from Gigabit Ethernet to Packet Over SONET at 
OC-3c/STM-1. OC-12c/STM-4,, OC-48¢e/STM-12 speeds to- ATM. Netlron also 

includes extensive redundancy into every aspect of mechanical, hardware and software 

design, and offers robust routing protocel support including OSPF -and BGP4 


All. of ~which means: the Netlron400, > Netlron800. and) Nethron!3500 are 


A Co Sh ' 1) s 
essential in-creating. the world’ fastest, most reliable backbone networks 


Call |-888.FURBOLAN (887-2652), email info@ foundrynet.com or zo 
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Details for .Net Tool Set 


NEWS 
Microsoft Still Sketchy on 


Analyst: Middleware-layer concept 
aimed at thwarting Java jumpers 


BY LEE COPELAND 
AND DOMINIQUE DECKMYN 


R 


r1Ts Professional 
Developers Con- 

ference last week, 

Microsoft Corp. 

unveiled a_ bit 
more of Microsoft.Net, the 
company’s upcoming platform 
for developers to create Web 
Yet with final deliv- 
still at 


services 


ery least two years 


away, crucial pieces of the 


Continued from page 1 


Microsoft.Net 


of tools and infrastructure. 
“One of my biggest worries 
is, do I really want to go with 
the. Net strategy? Because I 
think I will be sacrificing some 
cross-platform compatibility,” 
said Tom Thornton, an infor- 
mation technology manager at 
MIT. “They are calling the net- 


work the Web, but I see a lot of 


network capabilities being sac 
talk to 
servers, for instance.” 
Che .Net framework promis- 
transform 
based applications into Web 


rificed. I can’t other 


es to Windows 
sites that share services with 
applications written in other 
languages and for other oper- 
ating systems. 

Microsoft.Net will require a 
64-bit Windows operating sys 

revamped 
XML-based 


tem foundation, 


tools, a host of 


standards and the patience of 


developers. 

Microsoft has just begun to 
upgrade its Visual Basic tools 
from a 32-bit environment to 
64 bits and to push for the 
adoption of the new C# (pro- 
nounced “C sharp”) program- 
ming language. Microsoft offi- 
cials readily acknowledge that 
it will take at least two years to 
execute the tools and operat- 
ing system overhaul. 


.Net puzzle are still missing. 
The Microsoft.Net concept 
- a middleware layer that lets 
Windows applications share 
Web with 
built in other languages and 


services software 
operating systems — was in 
troduced late last month. But 
there was scant detail on it un 
til last 
where preview versions of the 
Visual Studio.Net 
ming tool set, two newly pro 


week’s conference, 


program- 


posed specifications and the 


Its going to take a year be- 
fore any of this can even begin 
to be implemented, and it’s not 
going to be as easy as they’re 
saying,” Rusty Zarse, a 
Web developer at HPC inter- 
in Atlanta. “It’s still 
a great evolution in technolo 


said 
active Inc. 


gy, but it’s not going to be a 


quick process.” 


Proof's in the Pudding 


“The concept is good, but if 
it actually works, that would be 
fantastic,” said Jeremy Smith, a 
software developer at Ameri- 
can General Corp. in Houston 
“Microsoft always says a lot of 
good things, but whether it ac- 
tually comes true remains to 
be seen.” 

Other 
that skepticism. 

“It’s not Win- 
dows is going at this point. It 
looks like they totally 
switching, and it like 
there is a lot of confusion going 
said Sil 
Zendejas, a software developer 
at the Jet Propulsion Laborato- 
ry (JPL) in Pasadena, Calif. 

What the 
chord with developers here 
was Microsoft’s 
make C# a 
support 


developers shared 


clear where 


are 


seems 


on within Microsoft,” 


struck loudest 
pledge to 
standard 
languages 
through its Microsoft Interme- 
diate Language and Common 
Language Runtime (CLR), a 
universal engine for running 
different languages. 

In theory, by using CLR and 


and to 
outside 


Coming 
Attractions 


Developers at Microsoft’s Dev 
Con saw previews of new tools: 
Visual Studio.Net 


version due next year 


Preview released; final 


Active Server Pages+ Expanded with 
user interface components that execute 


locally in Internet Explorer 5.5 


64-bit Window 


final version due when Int 


2000 Preview released 
el's Itanium chip 
ip 
SOAP Contract Language and SOAP 
n 7 anal 
iWO Preview VerSIONS OF Spec 


nplement ¢ 


an internal compiler to gener 
Microsoft 
Language, 
write applications in Pascal 


ate Intermediate 


developers could 
or Fortran that would run in 
the .Net environment. Micro- 
soft officials said 17 third-party 
programming language devel- 
opment companies have agreed 
to support .Net 

Zendejas said CLR could 
help the JPL better utilize the 
talents of Fortran and Cobol 
developers. 

“I've tried C#, and it’s still 
shaky, and [it will be] a while 
before it’s ready,” he said. “But 


64-bit Windows 2000 were 
demonstrated. 

The massive overhaul of Mi- 
crosoft’s tool set is aimed at 
keeping its developers from 
straying to the popular Java 
programming language, ana- 
lysts said. 

“Microsoft has 
the 


essentially 
announced obsolescence 
of its entire product suite,” said 
Rob Enderle, an analyst at Giga 
Information Group Inc. in 
Cambridge, Mass. “It’s a major 
[product] shift. Microsoft is 
trying to keep its developers 
from leaving and going to oth- 
er technologies.” 


Enderle added that Micro- 


at least they have something to 
give us so we won't abandon 
the platform and go to Java.” 
“Compiling to an [interme 
diate language] has been at- 
tempted in the past, but it’s 
complex,” said Jim Rutherford, 
a senior research analyst at 
Southwest Research Institute, 
a maker of navigational sys- 
San Antonio. “We'll 
have to see how well it does 
the job. We do high-perfor- 
mance work, so whether or not 
it will be applicable to us is 
something that we'll have to | 


tems in 


see.” D 


Hosted Services Concern Developers 


Corporate developers at Micro- 
soft's Professional Developers 
Conference last week said they're 
looking forward to getting applica- 
tions up and running faster by us- 
ing hosted Web services, but 
they're concerned about security 
and the effect on network respon 
siveness 

Tim Oliver, a senior systems 
analyst at General Electric Co., 
said during a panel discussion 
that it may not be wise to use 
hosted Web services for vital busi- 
ness functions. And panelist Buck 
Buchannon, a senior programmer 
at the U.S. Department of the 
Treasury, said security is his 
biggest concern about the Web 
services concept. 

Others said it remains unclear 


how their companies’ network use 
would change if corporate appli- 
cations make calls to computing 
services that reside on the Web. 
How predictable overall system 
performance would be is another 
issue to watch, they added 

Web services are a key piece 
of Microsoft's .Net plan, which 
allows for the creation of software 
components that can be used by 
companies as building blocks tor 
developing new applications or 
expanding the functionality of 
existing ones. The components 
will be able to run locally on cor- 
porate systems or at application 
service providers. Microsoft will 
also host some Web services it- 
self, including the Passport ident- 
ity service. - Dominique Deckmyn 
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soft is one of the few compa- 
nies that could execute such an 
extensive product overhaul but 
cautioned that it would take 
Microsoft a minimum of two 
years to get a comprehensive 
set of tools into developers’ 
hands. 

The Visual Studio.Net tool 
set includes C#, which is anew 
language for developing Web 
services, and revamped Visual 
Basic, Visual C++, Active Serv- 
er Pages+ and Visual FoxPro 
tools. 

Still missing is the Common 
Language Runtime for C# 
(pronounced “C-sharp”) and 
the universal compiler, which 
will translate code written in 
languages like Cobol and Perl 
to an intermediate language. 


More Internet Products 

The new Active Server 
Pages, ASP+, will have the abil- 
ity to compile server-side com- 
ponents. When used with In- 
ternet Explorer 5.5 — also re- 
leased at the show — ASP+ 
Web pages can send a “client 
control” down to the browser, 
giving a Web page Windows- 
like graphical user interface 
features. 

Microsoft also gave devel- 
opers preliminary versions of 
SOAP Contract Language and 
SOAP Discovery, two newly 
proposed software develop- 
ment specifications that are 
integral to the Internet-based 
.Net Web services strategy. 
The specifications are based 
on Microsoft’s Simple Object 
Access Protocol (SOAP), 
which has been submitted to 
the World Wide Web Consor- 
tium for review. 

“Microsoft realizes that this 
is a significant change and that 
it will be a culture shock to 
developers,” said Mark Driver, 
an analyst at Gartner Group 
Inc. in Stamford, Conn. “Visual 
Basic deployment is on 32-bit 
Windows. And they reached 
the glass ceiling on how far 
they could go with it.” 

Microsoft Chairman and 
Chief Software Architect Bill 
Gates announced a preview re- 
lease of 64-bit Windows 2000 
and said next year’s Whistler 
release of Windows will in- 
clude some of the .Net technol- 
ogy, including the ability to 
save files to a Microsoft-hosted 
storage service. He said the 
Blackcomb version of Win- 
dows, due in 2002 or later, will 
be the first to feature the .Net 
User Experience. D 
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It’s called Symantec Enterprise Security. A flexible, modu- 
lar solution for everyone who recognizes that enterprise 
security isn’t an expense, it’s an investment in your future. 
Symantec Enterprise Security is comprehensive, without 
being confining, so you can construct the solution that’s 
right for you. We'll help assess your security needs and let 
you choose from among our best-of-breed, multi-platform 
Internet security products. Along with our world-class 
Call us today at 800-745-6054, or visi prtessional ser 


www.symantec.com/enterprise-security vices and support, 


for more information or to speak to a sales representative now. ; 
fe ™ P you'll also have 





access to Symantec’s security partners, and to the Digital 
Immune System™ our unique technology for detecting, 

y q gy g 
defining and curing viruses. Symantec’s content-filtering 
products let you manage Internet usage. Finally, our 


intrusion prevention products assess, monitor and enforce 


predetermined security levels. So critical business and 


e-commerce assets stay secure. With Symantec Enterprise 

Security you'll have the technology and the confi- 

dence you need to 
. 4 
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connected world. 
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It's that sinking feeling in your stomach. That 
look your face makes every time you read a 
story about a disastrous corporate security 
breach. It’s that nagging fear that won't go 
away no matter how many times you tell 
yourself there’s nothing to worry about. 
Because there is, security is the number one 
concern of every IT professional for good rea- 
son. The good news is that there’s a proven 
solution you can trust. 


Without Bullet-Proof Security, 
Successful eBusiness Is Impossible 


The only thing bigger than the opportunity that 


(AOMPUTER® 
| SSOCIATES 


Software superior by design. 


comes with putting your business on the Web 
is all the risk that goes with it. 

Undetected attacks can strike at any time, 
from anywhere, in a mind-boggling variety 
of forms. Most sites can’t even track every 
attempt. And new threats are developed every 
day, all over the world. 

Without the right protection, eCompanies 
risk losing everything: data, customers, 
revenue, and more. 


A Simple Solution To Your Most 
Complicated Challenge 


Online business through eCommerce, corpo- 
rate intranets, partner-to-partner transactions 


on extranets and websites, as well as their 
supporting enterprise-wide assets — all need 
to be secured. Protecting the integrity and 


availability of 
mencanieee © rust Security Suite 
mation is critical HMANeefsSst eet ice) 
to all organiza- fRaAhaistetcol 
tions. e Single Sign-On 

Wemeieiicem ° Firewall 
siiesceeleeieme © Content Inspection 
ocllemsmenesimeem ° Intrusion Detection 
FMOmelmececes ° Policy Compliance 

e Audit 


end and legacy 
Sciismenuicme ° Virtual Private Network 
Pe alee 101 


world. 

Unfortunately, Uitte Clay 
in the race to ¢ OCSPro 
become Web- CV eA Lets 
enabled, secu- 
rity has taken a back seat. IT managers 
often give themselves a false sense of 
security with a standalone or partial security 
solution. They forget that security is only 
as strong as its weakest link and that 
eCompanies need an integrated and com- 
prehensive security solution that provides 
best-of-breed functionality. 
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eTrust Enables eBusiness 
eTrust provides all the security solutions an 
eBusiness needs: 


COMPREHENSIVE — eTrust covers all secu- 


rity functionality, from the browser to the 
mainframe, ensuring complete security in 
today’s highly complex environments. 
BEST-OF-BREED — elrust solutions offer 
best-of-breed functionality across the board. 
INTEGRATED — all eTrust solutions are 
designed and built to work together seam- 
lessly and deliver the highest level of 
integration. 

EASY — eTrust solutions are easy to use, 
deploy, and administer, ensuring any environ- 


ment is secured quickly and correctly. Your 
training costs will go down as your security 
goes up. 


MISSION-CRITICAL — eTrust solutions offer 
the scalability, depth, and robustness fast- 
growing and successful eBusinesses need. 


eTrust Is Open And Extensible 

elrust allows you to leverage existing invest- 
ments in security solutions — you will never 
have to start over or convert anything. And 
eTrust can be implemented one function at a 
time or all at once — it’s your choice 

And since eTrust is built on the Unicenter 
TNG® Framework\” it lets you snap-in other 


eBusiness management solutions as you grow 


and your needs change. eTrust is built on a 
standards-based, open infrastructure, so it's 
always easy to plug in any other standards- 
compliant products or solutions 


eTrust ls Trustworthy 
elrust is not only backed by the world’s 
leading security software company; it is 
also complemented by a complete set of 
outcome-based service offerings, including 
assessment, implementation, audit, as well 


as complete security management « 
ing. CA Services” stands ready 


your implementation is fast and trouble-free 


lf your company is making the difficult transi- 


tion to an eBusiness, you owe it to yourself to 
find out more about the security solution more 
eBusinesses trust 


For more information, 


Call 1-800-377-5327, or visit 


WwwwW.ca.com solutions /enterprise /etrust/ 


elrust 


Backed By The #1 Security Software Company 


Assess 


Manage 


Protect 


Detect Enable 
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NEWS 


IT Departments Frazzled 
At Cash-Short Dot-Coms 


Frantic pace, tight budgets, staff exits 
lead to mistakes, neglect of IT basics 


BY KIM S. NASH 

S MORE AND more 
dot-coms fall on 
hard times, insid 
ers and ex-em 

ployees say the 
IT groups at those firms are 
frazzled —- running short on 
cash, time and skilled staff. 

Millions are spent on adver- 
tising instead of operations. 
The hours are long, but the 
time to make information tech- 
nology decisions is short. The 
chaos leads to mistakes. And 
staff shortages only get worse 
when IT employees leave as 
financial trouble arrives. 

To understand life at a strug 
gling dot-com, listen to John 
Puckett, former CIO at 
defunct Toysmart.com 
“You're standing at the top 


now- 
Inc.: 


of a cliff, looking at the rocks 
below. You 


[technology] 


can make any 
decision 
want very quickly — and the 
impact of it is the com- 


you 


pany’s future. That cre 
ates 
feeling in your stomach.” 

A stingy 


a very interesting 


corporate 
help. 
Waltham, 
Mass., went belly-up last 


parent doesn’t 


Toysmart in 
month when majority 
investor The Walt Dis- 
ney Co. decided to stop 
funding the company 
[News, June 26]. But for 
several Bur- 
bank, Calif.-based Dis- 
ney had been reluctant 
to give Toysmart’s IT 
department the money 
necessary to, among 
other things, hire the 15 
or 20 additional people 
it needed, Puckett said. 
Drkoop.com Ine. a 
health information Web 
site that has been losing 


months, 


money, has seen its IT 
people quit because of 
the company’s financial ; 
problems, which also 
make it hard to recruit 
newcomers, according 
to Lou Scalpati, a 
Drkoop co-founder and 


chief development officer. 
The company, trying to con- 
serve operating funds, has laid 


off 35% of its staff since the 
spring, though Scalpati said no 
full-time IT workers were let go. 

The cash crunch at Austin 
Texas-based Drkoop also means 
that plans for a backup data fa- 
cility outside of Austin have 
been put on hold, Scalpati said. 
Drkoop’s in-house data center 
and its outsourced backup cen- 
ter are both in Austin, but that’s 
a big risk if a natural disaster 
strikes the area. 


Disasters Waiting to Happen 


Some dot-coms don’t even 
have proper disaster-recovery 
plans in place, according to U.S. 
Securities and Exchange Com- 
mission (SEC) documents. 

One is Pets.com Inc., an on- 
line retailer of pet products in 
San Francisco. “We do not cur- 
fully redundant 


rently have 


GORDON JONES, CIO at Beyond.com, says “there’s 
quite a bit of pressure” to keep up site performance 


systems or a formal disaster- 
recovery plan and do not carry 
sufficient interrup- 
tion insurance to compensate 
for losses that 
Pets.com told the SEC in May. 
The risk is more than theo- 
retical. During a six-week peri- 
od in February and March, the 
Pets.com Web site was unex- 
pectedly down 10 times, once 


business 


may occur,” 


for 13 hours. Customers either 
couldn't access the site at all or 
couldn't place orders, Pets.com 
told the SEC. 
Pets.com declined several 
requests for interviews; the 
SEC filings didn’t explain what 
caused the unplanned outages. 
“Data has to be their most 
valuable asset. Not to protect it 
seems unbelievable,” said John 
Heath, a professor of computer 
at the University of 
Southern Maine in Portland. 
Sometimes a 
vives a technical glitch only 
through the heroic efforts of its 
IT staff. 
Despite several server crash- 


science 


dot-com sur- 


es one weekend last summer, 
Drkoop users never saw the 

site go down, said 
Robert Eric Pearse, the 
company’s former sys- 
tems configuration man- 
ager. 

On a Friday night, 
memory problems kept 
bringing down the Mi- 
Corp. Internet 
Information Server soft- 
Roughly eight 
members of the IT staff 
had to cut short their 
evenings out to fix the 
situation, said 


crosoft 


ware. 


Pearse, 
who is at Car- 
Order.com Inc., an on- 
line car-buying site in 
Austin, Texas. 

While Drkoop devel- 
opers paged through 
user logs, “We had two 


now 


folks at hosting facilities 
rebooting the servers 
when they crashed,” 
Pearse explained. “It 
was tense.” 

They finally traced 
the problem to a new 
server-side script that 
had overloaded the 
server software. The 
script’s author should 


You can make 


any [technology] | 
decision you want | 


very quickly — 
and the impact 
of it is the 
company’s future. 


JOHN PUCKETT, 
FORMER CIO AT TOYSMART.COM 


have reconfigured the servers | 


to handle the new code load, 
Pearse said. 

“At least month, 
there’s a problem like that” at 
Internet 
Pearse, who has worked at six 
Net three 
“You're dealing with new tech- 
nology and you're trying to do 
it faster than your competition 
and you just forget stuff.” 

Yet he insisted that Drkoop 
“all in all [has] done a great job 
of system uptime.” 


once a 


companies, _ said 


firms in years. 


Overlooking the Obvious 

Inevitably, the chaos leads to 
carelessness. 

During a recent server up- 
grade at the offices of a major 
online shopping mall, for ex- 
ample, a young network engi- 
made the 
rookie mistakes. 

As the staff tuned a new Sun 
Microsystems Inc. Enterprise 
10000 paid 
much attention to a thick cable 


neer 


server, no one 


lying across the threshold of 


the glass room, according to 


the company’s former chief 


technology officer. 

“T was thinking, “That could- 
n’t be the network connection 
to the server, because no one 
would be stupid enough to put 


rookiest of 
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it in the doorway, ” recalled 
the 37-year-old former CTO. 

Two days later — it had to 
happen — someone tripped on 
the cord and knocked out the 
server, albeit for just a few 
minutes. The company’s data- 
base went down, causing er- 
rors for online users doing 
searches or updating shopping 
carts at the time. 

“The guy who set it up had 
been reassigned to another fa- 
cility. Everyone thought it was 
just a test cable and not the live 
connection,” the ex-CTO said. 
“This is what frenzied IT will 
get you.” 

The relentless pressure at 
dot-coms can unsettle IT peo- 
ple used to methodical deci- 
sion-making, said Gordon 
Jones, CIO at Beyond.com 
Corp., an online computer 
store in Santa Clara, Calif. 

“If you want more reliability, 
you have to minimize changes. 
But if you minimize changes, 
then you don’t get more func- 
tionality,” Jones said. “It’s not 
the ideal environment to make 
long-term decisions.” 

Plus, every blip of Web site 
performance can be tracked, 
traced, reported and dissected 
— so IT managers are account- 
able 24 hours per day. 

Beyond.com lost $45 million 
for the first quarter of this year, 
while its stock is at $1.50 — 
down from a high of $30. 

Jones has been at Beyond.- 


com for 14 months and over- 


sees a staff of 80. He was CIO 
at Franklin Resources Inc. in 
San Mateo, Calif., an old-line 
financial giant (with $222 bil- 
lion in assets), where he over- 
saw a staff of 800. 

At Beyond.com, he’s still a 
key senior executive. But now 
he carries a beeper that flashes 
hourly statistics on how the 
Beyond.com Web site is run- 
ning, and he has to report to 
business managers every 
Monday on site performance. 
“There’s quite a bit of pres- 
sure,” he said. 

The intensity can wear 
down even the most enthu- 
siastic IT people. Toysmart’s 
Puckett, who is in his early 50s, 
said he has gotten “hundreds” 
of calls and e-mail messages 
with leads on new jobs but isn’t 
sure he’ll stick with the Inter- 
net life. 

Puckett’s wife, Helen, said 
she doesn’t care if he goes to a 
traditional company or anoth- 
er Internet venture “as long as 
the hours are better.” D 
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NEWS 


U.S./Europe Privacy Deal 
Sent Back for More ‘Talks 


European Parliament rejects proposal; 
safe harbor agreement in question 


BY JENNIFER DISABATINO 
AND CRAIG STEDMAN 


NE MONTH 
the 15 
nations 


after 
member 
the 
European Union 


of 


approved a pro- 
posed set of data privacy rules 
for U.S 


companies that do 


business in those countries, 
the European Parliament has 
voted to send the so-called safe 
harbor agreement back to the 
negotiating table. 

By a 279-259 vote with 22 ab 
stentions, the parliament earli- 
er this month adopted a resolu 
tion criticizing the proposed 
privacy protections and de 
manding more changes in the 
safe harbor agreement, which 
has been in process for nearly 
two years 

According to a report posted 
on the parliament’s Web site, 
the resolution directs the Eu- 
add 


such items as a means for con- 


ropean Commission to 
sumers to file privacy-related 
complaints to an independent 
body and a requirement that 
companies compensate people 
for any damage resulting from 
violations of the privacy rules. 


Business as Usual 

The safe harbor agreement 
is supposed to allow U.S. com- 
panies that promise to adhere 
to its provisions to continue 
e-commerce transactions with 
and 
download employee informa- 


European customers 
tion from corporate databases 
maintained in Europe. 

But the U.S. Department of 
Commerce, which negotiated 
the agreement with European 
officials following the passage 
of stringent privacy regula- 
tions by the countries in that 
region, said it isn’t certain how 
this month’s vote will affect the 
safe harbor process. 

“We still think the [agree- 
ment] is the most effective ve- 
hicle for bridging our different 
approaches to privacy,” a Com- 
merce Department spokesman 
said. But it’s “unclear what the 


{European Commission] will 
added 

David Aaron, an attorney at 
Washington law firm Dorsey & 
Whitney LLP, who helped ne 
the harbor 


do now,” he 


gotiate safe deal 


while serving as undersecre- 
tary of commerce, said U.S. of- 
ficials are unlikely to agree to 
at least two of the European 
Parliament's requested changes. 
For example, the resolution ap 
proved by the parliament calls 
on the European Commission 
to pen contracts that European 
in US. 


citizens could invoke 


courts as part of lawsuits for al- 
leged privacy violations. Al- | 
lowing this “would require a | 
complete change in U.S. ju- 
risprudence, and we're not go- 
ing to go for that,” Aaron said. 
Some European Parliament 
members also want to see the 
safe harbor system up and run- 
ning before they approve it, 
Aaron added. But that would 
require U.S. 
“make millions of dollars in in- 
vestments” to implement the 
without 


companies to 


privacy 
knowing whether they would 
be able to use them, he said. 
The Computer & Communi- 
cations Industry 
(CCIA), 
trade 


provisions 


Association 
a Washington-based 


association, also criti- 


cized the parliament’s action. 
The vote “can do very little to 
Internet usage, in- 
vestment and the development 
of e-commerce in 
Europe,” said CCIA President 
Ed Black 
leased earlier this month. 

The parliament, according 
to its report on the vote, ap- 


promote 
initiatives 
statement 


in a re- 


proved the resolution over the 
strong objections of European 


Demand for Hosting Services Trails Supply 


Competition heats 
up in search of users 


BY MARK HALL 
With hosting capacity at appli- 
cation service providers (ASP) 
growing by leaps and bounds, 
the service providers must be 
creative to attract new users to 
their data centers. Yet despite 
ample supply of capacity, ASP 
pricing appears to be holding 
firm for now. 

Last week, Intel Online Ser- 
(IOS), a_ wholly 


vices Inc. 


owned subsidiary of semicon- 
ductor giant Intel Corp., intro- 
duced its AppChoice program 
to entice customers to its five 
new data centers. The compa 
ny’s parent has committed to 
spend $1 billion on data center 
infrastructure, an investment 
that could more than triple by 
the end of next year. 
AppChoice constitutes a 
change in IOS’s business strat- 
egy, which was to host high- 
margin custom applications 
for big customers. The new 
package allows IOS customers 
to remotely manage their own 
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programs, cutting IOS out of | 


that part of the business. 
“Today, it’s a little hard to 

choose your customers,” said 

David Rowe, IOS director. He 


acknowledged that current 


customers use nearly 25% of 


the capacity at one IOS data 
center for simple co-location, a 
business that wasn’t part of the 
original IOS strategy. 

Less than two months ago, 
Exodus Communications Inc. 
in Santa Clara, Calif. an- 
nounced an expansion of its 
target customers with a menu 
of managed service plans, 

changing focus from its tradi- 

tional lower-overhead co-loca- 
tion users. The company oper- 

ates than 1.5 

square feet of data center real 

estate, and it plans to expand to 

4 million square feet by the end 

of the year. 

Filling these and other data 
centers with paying customers 
is the big challenge service 
providers face, observers say. 

One ASP, Agiliti Inc., which 
had built its own data center, 
has shifted its strategy because 
of the abundant capacity. Ac- 
cording to Feisal Mosleh, vice 
president of marketing and 
product management at the 
Plymouth, Minn.-based com- 

| pany, Agiliti is handling its 


more million 
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Commission member Frits 
Bolkestein, who was said to 
have “categorically excluded 
[the idea of] going back to the 
negotiating table with the U.S.” 
during a debate on the issue. 
Bolkestein denied that the 
European Commission had ex- 
ceeded its powers in declaring 
the safe harbor provisions ade- 
quate, as the parliament’s reso- 
lution claims. And he said the 
negative vote on the agree- 
ment would put the commis- 
sion “in a very difficult posi- 
tion,” given the lengthy negoti- 
ations with U.S. officials. 
Aaron said he agrees. “I 
don’t think the ball is in our 
court. If the Europeans think 
that they can put on an infor- 
mation embargo that will 
bring us to our knees, that’s 
not the case. [The European 
Commission has] as much to 
lose as we do.” D 
Washington bureau chief Mitch 
Betts contributed to this article. 


growth by renting available 
space from other data centers 
because pricing has improved. 

“Building a data center is 
like adding another sugar re- 
finery, which the world does 
not need. However, you can 
never have too much choco- 
late. And that’s what we sell,” 
he said. 

“Supply overwhelms  de- 
mand,” said Bill Martorelli, an 
analyst at Hurwitz Group Inc. 
in Framingham, Mass. But he 
said he doesn’t think users will 
be able to leverage that into 
cost savings. “I don’t think IT 
execs should try to squeeze 
every last dime out of an ASP.” 

Carlos Mendez started using 
Intel’s AppChoice as a beta 
user in the spring, when he was 
vice president of Internet ser- 
vices at CommerceRoute Inc. 
in Emeryville, Calif. Now vice 
president of business develop- 
ment, Mendez said he chose 
IOS because his company’s on- 
line digital market operations 
needed to scale rapidly. But he 
said IOS could have been more 
competitive in its pricing. 
“They need to be more flexi- 
ble. Not just in services, but in 
getting the business,” he said. 

Although IOS didn’t negoti- 
ate on price with Commerce- 
Route, Mendez said continued 
investment in data center ca- 
pacity and competitive ser- 
vices means that “it’s going to 
change.” D 
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many critical systems you'll 

have to support next year? 


By picking a UPS scalable to 
your network requirements, 
Space, and budgetary needs. 


For over 30 years, Liebert has provided power protection for the world's most critical 
systems. We designed the new Nfinity” UPS to carry on the tradition of Liebert reliability 
in today's critical network applications. 


The modular design aliows you to configure Nfinity to match your changing power needs, and all modules are hot- 
swappable, allowing for uninterrupted performance when you service or expand the system. You'll find redundancy 
and patent pending intelligence features in the power and battery modules, power bypass systems, communication 
paths, and system controls. No other UPS achieves that tremendous breadth of reliability. 


Nfinity offers superior value. It's extremely cost-efficient to operate and ships preassembled and pretested, eliminating 
costly user assembly time. You're also backed by Liebert’s service organization - trained and staffed to support you 
24x7x365. For complete product information, visit our website at www.nf1.liebert.com. 


Nfinity - the easily scalable, incredibly intelligent, remarkably redundant UPS that takes systems availability 
to the next level. 


© 2000 Liebert Corporation. All rights reserved throughout the world. Specifications subject to change without notice. 
All names referred to are trademarks or registered trademarks of their respective owners. 
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1. AMD (see example) 

2. Athlon 

3. processor 

4. now 

5. with 
full-speed 

7. performance 

8. enhancing 


9. cache 


10.memory 


With speeds of up to 1 GHz, and now with full-speed performance-enhancing cache memory, the 
AMD Athlon™ Processor helps.you take full advantage of your most demanding applications. This is just 
one of the many reasons AMD Athlon and AMD Athlon processor-based systems have already won 
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NEWS 


Firms Opt for Long-Term Outsourcing Deals 


BY JULEKHA DASH 
London-based aerospace firm 
Rolls-Royce PLC earlier this 
month inked a 12-year, $2.1 bil- 


lion 
with Electronic Data Systems 
Corp. Analysts said such large 
deals reflect an interest among 


outsourcing agreement | customers to keep technology 


costs stable over time. But giv- 
en the rapid changes in tech- 
nology, the strategy could prove 


iT°’S ALL ABOUT RESTORE 


66GB 
6MBysec 


$89 


Say Hello to a Good Buy. 





to be risky, they said. 

Plano, Texas-based EDS will 
develop e-commerce _initia- 
tives for Rolls-Royce, includ- 
ing the creation of Internet 
portals to customers and sup- 
pliers, said John Meyer, pres- 


The VXA-!I TAPE DRIVE offers you 3 times the performance and capacity of DDS-3 at about the same cost, and 
higher performance and capacity than DDS-4 at less cost. Plus, it provides sky-high reliability, unheard of restore 


capabilities, and compatibility with just about every operating system and software out there. That's what happens 


when two engineers, who have been pioneering tape drive innovations for a combined 60 years, set out once again 


to create something just a little bit better. A little bit smarter. And a lot more affordable. 


Try it for yourself, free, for a full 30 days. Just go to www.ecrix.com/cw. Or call 800.VXA. TAPE — and say hello. 


MSRP for internal drive. External drive pictured, $1,049 MSRP. Specifications assume a 2:1 ALDC hardware compression ratio. 
© Copyright Ecrix Corporation 2000. All rights reserved. VXA is a registered trademark of Ecrix Corporation. 
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ident of EDS Europe, Middle 
East & Africa. These portals 
will enable customers to locate 
spare parts and check invento- 
ry, while suppliers can collabo- 
rate online, he said. 

EDS will also install, host 
and maintain SAP AG’s R/3 
enterprise resource planning 
software for Rolls-Royce. The 
agreement replaces a contract 
that was to expire in 2002 and 
covers EDS’s support of the 
firm’s applications and net- 
work infrastructure. 

Analysts said customers 
who sign such hefty contracts 
want to secure a favorable 
price over the long run. “Con- 
sulting rates are only going to 
go up,” said Joshua Randall, an 
analyst at Kennedy Informa- 
tion Research Group in Fitz- 
william, N.H. 


Potential Problems 

But these customers also 
face some risks, analysts said. 
As technology changes, lead- 
ing vendors may not remain 
the top players in 12 years, said 
Julie Giera, a vice president at 
Giga Information Group Inc. in 
Cambridge, Mass. Giera noted 
that the large value of Rolls- 


ENGINE MAKER Rolls-Royce’s 
12-year deal with EDS is seen by 
some analysts as risky 


Royce’s contract stems from 
the fact that it covers 12 years. 

Martin Brodie, a Rolls-Royce 
spokesman, said the scope of 
the contract with EDS reflects 
the aerospace industry’s long 
business cycles. 

The deal shows that EDS is 
alleviating market concerns 
about the firm’s ability to bring 
e-commerce into its traditional 
outsourcing portfolio, Giera 
said (Week in Stocks, June 26). 
It also represents EDS’s suc- 
cess in the manufacturing sec- 
tor, an industry that has tradi- 
tionally turned to outsourcing, 
Randall said. 

EDS earlier this month also 
signed a seven-year, $700 mil- 
lion deal with Commonwealth 
Bank of Australia in Sydney. 
EDS will manage the bank’s 
technology integration fol- 
lowing its merger last 
month with Colonial Ltd. in 
Melbourne, Australia. D 





BRIEFS 


OCO Expects Larger 
Loss, Seeks Partner 


The Santa Cruz Operation Inc. 
(SCO) last week warned that its fi- 
nancial results will be worse than 
expected or the second straight 
quarter. And the struggling Santa 
Cruz, Calif.-based company said it 
has hired an investment banking 
firm to help evaluate its financial 
options. 

Doug Michels, SCO’s president 
and CEO, said in a statement that 
the Unix and Linux software vendor 
is looking at the possibility of a 
“strategic combination” with one or 
more vendors. 

SCO was expected to lose money 
in its third quarter ended June 30. 
But the company said the loss will 
be at least 50 cents per share, more 
than three times the average deficit 
forecast by Wall Street analysts. 


Satellite Venture 
Finds Investors 


Microsoft Corp. Chairman Bill Gates 
and several international investors 
last week announced that they have 
invested almost $300 million in 
1CO-Teledesic Global Ltd., a compa- 
ny that says it plans to become a 
global provider of wireless “Inter- 
net-in-the-sky” satellite communi- 
cations services, including tele- 
phone service, Internet access and 
broadband services. The invest- 
ments are part of the $2.1 billion 
that ICO-Teledesic - headed by 
wireless mogul Craig McCaw - 
needs to launch its services. 

ICO plans to begin offering its 
wireless Internet services and other 
packet-data services in 2003; the 
Teledesic unit plans to begin deliv- 
ering broadband data to mobile 
phones in 2004. 


Short Takes 


YAHOO INC. last week reported 
stronger-than-expected financial re- 
sults for its second fiscal quarter as 
well as a sharp increase in traffic to 
its Internet sites. . . . |BM an- 
nounced that it has acquired 
ARAGON CONSULTING GROUP, a 
market research and strategy firm 
in St. Louis. ... PMC-SIERRA INC, 
a maker of communications chips, 
is buying QUANTUM EFFECT DE- 
VICES INC. in a stock deal valued at 
about $2.3 billion. 
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‘Troubled StorageTek 
Replaces ‘Lame Duck 


Users, analysts mixed about how much 
impact new ‘outside’ CEO will have 


| 
BY MEGHAN HOLOHAN 


IVE MONTHS after its 
previous CEO sub- 
mitted his resigna- 
tion, struggling stor- 
age systems vendor 


Storage Technology Corp. has | 
| nounced his resignation. 


appointed a new leader. 
The Louisville, Colo.-based 


| 
company announced last week 


that Patrick J. Martin, former 
head of Xerox Corp.’s $8 billion 
North American 
Group, is its new chairman, 
president and CEO. 

But analysts and users are 
mixed about the impact that 
Martin, who has a strong mar- 
keting background, will have 
on the troubled company. 

“He certainly has interna- 
tional background and the ex- 
perience to run a good-sized 
firm,” said Bob Zimmerman, 
an analyst at Giga Information 
Group Inc. in Cambridge, 
Mass. 

Zimmerman acknowledged 
that he knows little about the 
new CEO but he said there is 
potential for Martin to help the 
company become profitable. 

But other analysts said they 
remain skeptical. 

“They came up with some- 
one who’s not only outside 
[StorageTek] but also outside 
of the industry. They went out- 
side of the industry before [for 
a CEO], and I’m not sure that it 
helped them very much,” said 
John Webster, an analyst at 
Nashua, N.H.-based Illuminata 
Inc. 

StorageTek needs a leader 
who can boost morale and fo- 
cus on operational excellence 
and product development, and 
the company thinks Martin 
will bring that capability to the 
table, Webster said. 

But investors want profit. A 
new CEO doesn’t translate into 
a positive business move with- 
out tangible financial benefits, 
said Shebly Seyrafi, enterprise 
hardware analyst at A.G. Ed- 
wards & Sons Inc. in St. Louis. 

Seyrafi said he thinks in- 
vestors had hoped for a leader 


Solutions | 





| with storage experience. But, | 


he added, appointing a new 
CEO is a positive step, since 
StorageTek had been operating 
with a “lame duck” CEO since 


February, when Martin’s pre- | 


decessor, David E. Weiss, an- 


Earlier this year, StorageTek 
announced layoffs of 1,300 em- 
suffered 

losses 


ployees because it 
higher-than-expected 
last year. 

The company lost $39.5 mil- 
lion in the first quarter ended 
March 31, a significant decline 
from the first quarter of last 
year, when it saw a $5.8 million 
profit. 

Seyrafi said StorageTek’s 
tape division is strong, but disk 


| is replacing tape in the storage 
| arena, and Hopkinton, Mass.- 


| in disk storage 
work (SAN) market 


Seyrafi said. 


of the new CEO. 


| QUESTIONS SURROUND Patrick 
J. Martin, StorageTek’s new CEO 





J.D. Edwards Prepares 


| Firm adding new 


routers, NT servers 


BY JAMES COPE 
Officials at enterprise resource 
planning (ERP) software de- 
veloper J.D. Edwards & Co. 
last week said the firm has un- 
dertaken a major upgrade of its 


corporate network to support | 


its international expansion 
plans and its application host- 
ing business. 

J. D. Edwards’ move is part of 
an evolutionary process rather 
than a one-time 
build-out, accord- 
ing to Ken Migaki, 

a vice president at 
the Denver-based 
company. 

“We’ve got a 
base network and 
are now expand- 
ing to meet new 
business needs,” 
he said. 

In addition to 


‘Network for Major Upgrade 


| providing more network ca- 
pacity to serve new office loca- 
| tions in Australia and New 
Zealand, J.D. 
| preparing its data pipes to han- 


the Web. 





Technologies Inc. in Eden 
Prairie, Minn. 


upgrading from 
Cisco 5509 switch- 
es to Cisco Cata- 
lyst 6500s. 

The 6500s, Mi- 
gaki said, have 
more routing in- 
telligence, and mi- 
gration is expect- 
ed to be relatively 
seamless. Migaki 


| tor of operations at 


| Library 


based EMC Corp. is the leader | 


StorageTek’s recent expan- | 
sion into the storage-area net- | 
is wise, | 
but the company is at a disad- | 
vantage in that space because | 
it faces stronger contenders, | 


Users also said they’re wary | 
| proves the company realized it 
| has 


Edwards is | 
| do a demonstration, Migaki 
dle traffic from its own appli- | 
cation hosting service, called | 
JDe.sourcing, which hosts J. D. | 
Edwards’ ERP applications via 


Migaki said the upgrade in- | 
volves a transition to Catalyst 
6500 switches from Cisco Sys- | 
tems Inc. in San Jose and im- | 
plementation of network man- | 
agement tools from Magnum | 





“T think the market and most 


| of the users will give him a 


couple of quarters to show his 
stuff,” said Jerry Lynch, direc- 
Dublin, 
Ohio-based Online Computer 
Inc., which 
uses StorageTek’s 9840 tape 
system. “Six months out, 
though, he’ll pay hell if results 
surprise anyone.” 

Several users and analysts 
pointed out that StorageTek 
needs to focus on marketing, 
one of Martin’s strengths. 

Dr. Robert Cecil, director of 
network computing at the 
Cleveland Clinic in Ohio, also 


Center 


| uses a 9840 tape system. He 


said Martin’s appointment 
trouble 
strategies. 

“StorageTek is a technology- 
driven company, and EMC has 
been eating its lunch market- 
ing-wise,” Cecil said. “A com- 
pany may have superior prod- 
ucts, but [that’s] not why you 
buy the products. It’s the label- 
ing,” he added. B 


with marketing 


| Kathleen Ohlson contributed to 


this story. 


| said he’s running the 6500s in a 


lab environment before 
putting them into production. 


J. D. Edwards has also added 


| 300 Windows NT servers from 


IBM. The new servers, which 
went online in mid-June, host 
the J.D. Edwards demonstra- 
tion software. Previously, 
salespeople had to take a serv- 
er into a customer’s office to 


said. Now they can log on re- 
motely, which “minimizes prep 
time and shows a consistent 
demo,” he said. 

Migaki said he’ll use Coordi- 
nator and Cap-Irend from 
Magnum ‘Technologies, to 
streamline network manage- 
ment. The Web-based Coordi- 
nator application gives net 
work managers a real-time 
view of network problems by 


| connection. 
J. D. Edwards is | 


According to Michael Jude, 
an analyst at Enterprise Man- 
agement Associates in Boul 
der, Colo., Coordinator “pre- 


| filters alarms and avoids alarm 


storms from multiple devices.” 
Jude said Cap-Trend gives 
network managers a means of 


| tracking network performance 


time, enabling adjust- 
that counter bottle- 


over 
ments 
necks. D 
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Pay now, pay later 


ERHAPS THE ONLY THING you dread more than reviewing 
your data center’s cabling and network infrastructure is 
evaluating your array of software-usage contracts. They can 
be far more confusing and frustrating than your most 


chaotic wiring closet. 

You can license software for 
servers or clients. You can rent it 
by the week, month or year. You 
can pay per user, processor or 
transaction or by business volume. 
You can try open source or com- 
munity source. You can build it 
yourself from components and 
pay royalties or flat fees. And 
every once in a while, you can ac- 
tually buy and own a program. 

The choices for legally acquir- 
ing software are numerous. Some 
say too numerous. And it’s getting worse — 
vendors continue to add options or change 
things for their own sake, as Dominique 
Deckmyn reports in this week’s News sec- 
tion. It’s as if software vendors have con- 
spired to make the licensing process so awful 
that you’ll think an application’s bugs are 
pleasant by comparison. 

One of the worst offenses is capacity-based 
pricing [page 4, July 10]. Users are telling Com- 
puterworld that their ability to deploy better- 
performing hardware is harmed because 
software vendors tie their pricing to machine | 
capabilities. These capacity pricing schemes 
are primarily in the mainframe market, but 


CFeN cee) 


News item: Digital signatures suffer from lack of standards 


MARK HALL is Computer- 
world’s West Coast 
editor. You can contact 
him at mark_hall@ 
computerworld.com. 


database companies are beginning 
to push them in the server arena 
as well. This kind of price gouging 
handcuffs IT managers. 

Some hardware vendors profess 
to hate these complex and greedy 
sales tactics, while others urge 
software vendors to steer clear of 
them because they slow ship- 
ments. Yet IBM, which may lose 
S/390 sales because of them, still 
sells some software with capacity 
pricing language in its contracts. 

It isn’t just capacity pricing that disturbs 
IT managers. In the server market, some 


| vendors are revising their contracts to re- 
| voke ownership provisions. These nonper- 
manent licenses might prove to be a revenue 


boon for some vendors, but they often force 


| unnecessary business changes, as well as 


technology changes, on companies. 
Every IT executive I’ve ever spoken to 


| about this says paying for software value 
| isn’t a problem. But software vendors don’t 


seem to care about value. They seem focused 
on getting users to pay much more in every 


| conceivable fashion for much less. That may 
| be clever accounting, but it’s bad business. D 


| forms all these activities. 


| intensive and infused with 


| vidual tastes. Companies 
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LTAPS( 
Internet’s reach 
even extends to 


DON OTT 


4 P’s of marketing 


VERY BUSINESS SCHOOL graduate 
and marketing manager has 
learned the four P’s of marketing: 


| product, price, place and promotion. The 


paradigm was one of control, simple and 
unidirectional: Firms market to cus- 
tomers. We create products and define 
their features and benefits, set prices, se- 
lect places to sell products and services 
and promote aggres- 


| sively through adver- 


tising, public rela- 
tions, direct mail and 


| other in-your-face pro- 


grams. We control the 
message. 
But the Internet trans- 


DON TAPscoTT is chairman 
of Digital 4Sight and co- 
author of Digital Capital 

(Harvard Business 
School Press). 
Contact him at 

dtapscott@digital4sight.com. 


Products. Products are now 
mass-customized, service- 


customers’ input and indi- 


must constantly innovate, 
and product life cycles are 


| shorter. Customers now participate in creating 
| products, and products are becoming experi- 
ences. As a result, the old industrial approaches 


to product definition and product marketing are 


| dying. 

| Price. Dynamic markets and pricing are challeng- 
ing vendors’ fixed pricing. Through the Web, cus- 

| tomers can find ways that allow them to state 

| what they’re willing to pay and for what. “If you 

| deliver this afternoon, I'll pay A. If I can buy this 

| quantity, I’ll pay B.” Or “I'll accept certain defects 

| and pay C. If someone else will pay D, then I'll 

| pay E.” As buyers and sellers exchange more in- 

| formation, pricing becomes fluid. So markets, not 


companies, will price products and services. 


| Place. Every company now competes in two 


worlds: a physical world (marketplace) and a 
digital world (“marketspace”). Within a decade, 
most products and services will be sold in the 
marketspace. 

A new frontier of commerce is the “market- 
face,” the interface between the marketplace and 
marketspace. For example, some companies have 
both physical stores and an online presence 
(clicks and bricks). Customers of The Gap can 
buy clothes online; if the clothes don’t fit, they 


| can return them to a physical store. Or they can 
| browse the Web at their leisure and take print- 


outs of desired items to the store. The Gap has 


| even installed Web lounges in some stores where 
| customers can place orders. 
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Promotion. Advertising, promotion, publicity, 

public relations and most other aspects of corpo 

ice s are archaic concepts. They 
exploited one-directional, one-to-many and one- 
size-fits-all media to communicate “messages” to 
faceless, powerless customers. 

But with the Net, customers have the power. 
They have access to more comprehensive infor- 
mation about products. Customers participate in 
a multidirectional, one-to-one and highly tailored 
communications environment. So they, not you, 
control the marketing mix. They choose the 
medium and the message. Rather than receiving 
broadcast images, they do the casting. With com- 
panies such as Epinions.com, customers create 
online public opinion with one another, rather 
than just getting messages from earnest PR pro- 
fessionals. Marketers are losing control. 

The Net changes most aspects of marketing. 
When customers go online, everybody communi- 
cates — in multiple directions — and marketers 
can no longer control the four P’s. D 


NNAN'T 


DON TI 


Star power has 
its advantages 
in world of IT 


HEN ORACLE CEO Larry EIli- 

son was looking for somebody 

to head his latest “it’s-not-a- 
PC” venture, the person who got the call 
was Gina Smith, a technology journalist 
with a high-profile, on-camera ABC 
News gig on her résumé. It was an inter- 
esting choice. 

Maybe Ellison was moved by the vast- 
ness of an untapped 
resource. According 
to President Clinton’s 
Council of Economic 
Advisors, women hold 
only 8% of the nation’s 
top information technolo- 
gy jobs. 

More likely, Ellison was 
DON TENNANT is considering his own expe- 

Computerworld's 

assistant news editor 

Contact him at 


don_tennant@ 
computerworld.com. 


rience and recognizing 
that star power is what it 
takes to capture and hold 
the attention of the Inter- 
net Generation. 

In either case, Smith has her work cut out for 
her. As CEO of The New Internet Computer Co., 
her first order of business is to ceremoniously 
roll her eyes every time someone suggests that 
the $199 New Internet Computer is the reincarna- 
tion of Ellison’s first hard-diskless bad idea. 

But in fact, nothing could be further from 
the truth. 


NEWS 


I know, because Smith told me so recently dur- 
ing a phone chat. For one thing, unlike the origi- 
} 


] Tork c iter 
nal network cx uter, t 


1is computer doesn’t 
even have to be connected to a server, since all 
the software it needs to get you onto the Internet 
(including a version of Linux that some Oracle 
techie tweaked to make Netscape Navigator run 
the way it’s supposed to, Smith says) comes on a 
CD-ROM. 

Plus, this one has a friendly sounding, pro- 
nounceable, marketable acronym (NIC — as in 
New Internet Computer) rather than the not- 
nearly-as-personable NC. (It struck me that the 


world might be a different place today if only Elli- 


son had had the foresight back then to pronounce 
NC as “Nancy.”) 
So even though Smith had trashed the NC back 


ing for, she said, was somebody who could ex- 
plain the NIC and get people excited about it 


l 


S seraie wntvesl shied Cor ee Ce a 
Never mind that Sn had virtually no manage 


ment experience and had never done anything of 
the sort before. 

To her credit, Smith makes no bones about the 
fact that she’s nothing more than a figureh 
She said she hired the best manager she ever had 

a guy named David Street, who was her boss 
a hard-disk company she worked at right out of 
college in 1985 — and made him chief operating 
officer. (It sounds a little humiliating to me, but I 
doubt Dave had a better offer on the horizon.) So 
while he takes care of the pesky business of actu- 
ally managing the company, Smith is free to make 
personal appearances and do the celebrity CEO 
thing, which Wall Street just loves 


in her journalism days, Ellison called her last fall 


and said he had something very important to talk 
to her about. Smith said she hadn’t heard from 


Ellison in about three years and wasn’t sure 


whether it was one of her columns or an appear- 


ance on Oprah that prompted the call. 
When he hit her with the idea of running his 


new company, Smith said she “fell off the chair” 
but eventually agreed to do it. What he was look- 


Microsoft: Just trying 
to make a profit. . . 


AGREE WITH 

Michael Gartenberg 

that a breakup of Mi- 
crosoft would, most 
probably, increase Mi- 
crosoft’s software prices 
and benefit only its com- 
petition [“Why a Break- 
up of Microsoft Is a Bad 
Idea,” News Opinion, 
July 3). 

Those who shout that 
Microsoft is a bad mo- 
nopoly that needs to be 
broken up are only try- 
ing to gain something 
Microsoft is a company 
trying to make a profit, 
and in that it has used 
business practices that 
aren’t aboveboard; those 
practices should be 
changed. 

Kevin Sanchez-Cherry 
System security analyst 
Rockville, Md 


... or monopoly that 
deserves breakup? 


ICHAEI 

Gartenberg 

seems to gloss 
over a number of critical 


problems Microsoft cre- 
ated for itself in relation 
to the law and reflects 
too much time inhaling 
the many dizzying va- 
pors of Microsoft PR. 

I just wish there were 
a Microsoft like the one 
Mr. Gartenberg imag- 
ines. I wouldn’t want to 
break that one up either. 
But that’s not the Micro- 
soft we have. The Micro- 
soft we have is amoral 
and has earned its ire 
and judgment through 
years of disregard for the 
law and callous treat- 
ment of its “partners” 
and its despicable treat- 
ment of newly emerging 
companies and competi- 
tion. The public suffers 
due to the shoddy and 
insecure works it re- 
ceives, and it also suffers 
from having demonstra- 
bly few alternatives to 
these products, again 
due to the monopolistic 
control Microsoft has 
exerted on the compa- 
nies involved with PC 
production and distribu- 
tion. Breaking up may be 
hard to do, but it is due 
and just. 

teven Armstrong 

Milwaukee 


Grabbing Smith was a brilliant move on Elli- 


1 


son’s part. Aside from being smart and articulate, 


Smith has a great stage presence. Food for 


thought for some of those sluggish companies 


like Compaq, which, if it had any sense, would 


bump the pallid Michael Capellas down to chief 


operating officer and get Diane Sawyer on the 


phone. After all, when’s the last time you saw 


Mike on Oprah? D 


[Technolo- 

gy, June 
12] was an excellent sto- 
ry about a true profes- 
sional who deserves the 
accolades. 

Congratulations to 
Susan Burgess and kudos 
to Computerworld for 
recognizing a profession 
al who is dedicated to 
improving the quality of 
our software processes 
and the resultant soft- 
ware product. 

We need more people 
like Ms. Burgess — and 
the author who took the 
time to write an eloquent 
story about her. 

Carol A. Dekkers 

President 

Quality Plus Technologies Inc 
Seminole, Fla 
dekkers@qualityplustech.com 


Reasonable ways to 

avoid domain woes 
T SEEMS TO ME that 
the following would 
be a reasonable ap- 

proach for registrars to 


handle domain name 
nges [“Domain Name 
Game,” Technology 
June 12 
@ Changes don’t go into 
effect for at least five 
days, except in an emer- 
gency. Emergencies 
wouldn't be handled by 
the automated process 
and would require man 
agement approval by the 
registrar. 
@ When a change is sub- 
mitted, e-mail is auto- 
matically sent to the per- 
son listed as the adminis 
trator of the Web site 
@ Any report by a system 
administrator of a 
change he hasn’t autho- 
rized is treated as an 
emergency. 
Bradley Ross 
Programmer 


Philadelphia 


COMPUTERWORLD welcomes 
comments from its readers 
Letters will be edited for brevity 
and clarity. They should be ad- 
dressed to Jamie Eckle, letters 
editor, Computerworld, PO Box 
9171, 500 Old Connecticut Path, 
Framingham, Mass. 01701 

Fax: (508) 879-4843. Internet 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification 
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Dear Compute rworld Reader 


Growing, at unfathomable spe ed. e-business has become a Wa) of life for today’s business leaders. It's making 
overnight successes of clicks-and-mortar ¢ nterprises and creating unpre¢ edented new opportunities for 


bricks-and-mortar ¢ ompanies 


So it should come as no sul prise that SAS, a name that’s no doubt familiar to regular readers of our newspaper, 
is continuing Its long history ol innovation by embracing a true leadership role to move its customers ahead in 
the new e-conomy. You can see for yourself in this issue. Look for the colorful, intormative insert called The 
Power to Know™ Ivs your introduction to SAS® e-Intelligence and a bold reintroduction to 5 AS itself 


| hope you Il take a few moments to discover how the powel of SAS can help you 


e Align your organization. 
SAS e-Intelligence keeps all facets of vour enterprise moving, in line with yout overall strategy. It ensures 
that work teams have the tools they need to collaborate effectively on projects and processes, and that 


those processes are operating efficiently 


e Capitalize on your customer relationships. 
SAS e-Intelligence helps you build personalized sustainable relationships with your customers — on the 
Web and beyond And you can use that same knowledge to improve the effectiveness and profitability ol 


youl business processes and operations 


e Leverage your supplier relationships. 


SAS e-Intelligence consolidates your enterprise procurement data to gain a thorough understanding of 
business-to-business supplier relationships. So you can exploit youl purchasing pow er to increase bottom- 


line profitability 


To explore e-Intelligence in greater depth, SAS invites you to take part in a series of free virtual seminars. 
Each online event will feature expert advice from analysts and leading organizations on using The Power 
to Know™ to gain maximum competitive advantage. To sign Up for these live Webcasts visit 


ww w.sas.com/e-cast 


r've been impressed with all I've read - and seen — garding e-Int lligence and the new lace of SAS. Pm 


sure you will be, too 


Sincerely 


L. 


Joseph L. Levy 
President, CEO and Publisher 





= 
= 
~ 
= 
~ 
~ 
= 
SN 
<P) 
x 
~~ 
a 
Y 
~ 
~~ 








A burning desire to kn 
It’s what separates thos¢ 
standard from those 
strive to reach it. SAS 
puts The Po 
ach. Turning the 
data entering your company 
knowl e you can 
on the power of new Welt 
to propel your business farther 


Creating opportun 


organization to not only comy 


intelligently, but to lead the mark 


with true innovation 


] * 
decis 
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= The power to know your organization. 


Performance. It’s what propels the 
ind your organization 


ww do you align your 


operations and employees 


ve your goals? And measure 


ss toward tl 


a panoramic 
relationships 
SUCCESS ACTOSS \ 
ver been ea 
impact of individual 
ributions toward 
your shared vision. Or t 
ireas of your business 
ard identified objectives 
your company stands and 


vou need to lead it 


The power to know your customers. 
Your business competes in a market 
that is more crowded than ever and 
moves at a breathless pace. To claim 
ir place in the market, you must 
ace in the minds of 
your customers. SAS lets you 
harness the information you gather 
from every interaction with your 
customers to create a more responsive, 
personalized and innovative offering 
By organizing customer data in ways 
that make their needs and desires 
tangible, you can provide the products 
and services your customers demand, 
before they have to ask for them 
larget your most profitable customers 
and turn them into your most loyal 


supporters 





BU OCR ms ae 
In the Web economy, supplier 
relationships have evolved into 
crucial alliances. The speed and 
sae oma opm ZOleme( thieg 


intelligent products to market 


depends on the suppliers you choose. 


SAS gives you_insight into your 
supplier network like never before: 
With exclusive data from Dun & 
Beem emcee 
knowledge to turn your essential 
supplier relationships TORTS 
profitable ones. And ultimately, to 
Or mam kere e eee m oa aa (ors 
to market faster, at reduced cost. 
Know your suppliers better than 


they know themselves. 


GRU eie om ty 
DOCU 

You have data. We give you power 
to use it in ways you never thought 
possible. Across platforms and 
Place Meee MS ya teM Ole R Oty 
data to work harder, smarter and 


more profitably. 


EVCM LCR tome Rene tts 
market, only SAS can truly make the 
most of your existing infrastructure. 
Because the real marvels of software 
innovation are: the-ones that don’t 
just reach your highly trained IT staff 
- they make it to every desktop. 

PNG ACM UO CNA LUM Umer le ole 
already own and teverage it with new 


SOU eo Ocenia ieoniha 


Sofivare and services that 4urn the 
haos of data into the clarity you 
ica MLL aia ae ae hy TAS 

SAS” e-/ntelligence empowers the 
leaders, the thinkers, the creators in 
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that wi lead the marketplace of 
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application 
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“Without que 


CEO of AutoTrader.co ‘It al “SAS has 


company executive laily monitor our business effec 
improve and strengthen our business 


as well as track and report pr 


performance to our ing customers.” 
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Improving the retention and 
ICAO CUI SK Om UL 
long term is a challenge that 
Swiss bank UBS AG is meeting 
TLC Ceca 6 (e] USI thom 
PALE ASS COU Nae Leg 
Alm ANE VCMOL Lela 6] stom: 1110) 
his team rely on SAS data mining 
solutions to satisfy customers 
VALCO MS e-em ITLL Cel LaTe} 


TATE L NLM Cee eb eS 


based on customer profiles. 


“A cornerstone of the business 
philosophy of UBS’ Private 
Clients Department,” says 
Weiss, “is to improve the 
profitability of our customer 
relationships by using 
information-based marketing.” 


Weiss and his team used SAS to 
convert huge volumes of raw 
data into meaningful information 
that formed the basis of this 
marketing strategy. Using these 
UTM MEUM Oey eth se 
other departments in the bank 


FeO mU Tarun 


individual customers based on 
ramet msm Orde cel AL) 
and profile. 


“We were able to deliver a good 
ella UNLOL¢( 1 LEMO LAT MLO LLL a 
NRSC MM LIM Cs ar meet) 
improved client retention rates 
and greater success with new 
product offerings introduced 
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TLR Coli LOS r-L 
have been pleased with the 


AUGER) Med MSO LINE UC 
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mining operations. 


a CRE emer le mua mea 
that is state of the art, and SAS 
software is an integral part of 
this,” adds Weiss. “It's quick; 
Ul e)eee ALO R110] eae SM OL C8) 7) 
to be flexible and scalable.” And 
it continues to help UBS AG 
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JOHN GANTZ 


low to win 
the battle for 
“talent 


7 YOU DON’T THINK the hallmark 

»f a well-run IT department is its abil- 

ity to hire good people, take a tip from 
the major IT services firms like IBM, EDS 
und Andersen Consulting. These compa- 
iies spend about half of their marketing 
budgets to support recruiting. Apparent- 
ly they have less trouble finding projects 
than people to do the work. 

Your company is proba- 
bly in the same boat. With 
project deadlines getting 
squeezed and new e-busi- 
ness applications being 
driven by top manage- 
ment, your IT depart- 
ment’s ability to hire good 
people is arguably the 
most important factor for 


JOHN GANTZ is a senior 
president at IDC in 
Framingham, Mass. 
Contact him at 
jgantz@idc.com. 


long-term success. 

One of the keys to good 
hiring in this frenetic mar- 
ket, it turns out, is keeping 
accurate statistics and 

ics on the hiring process itself. This was con- 

»d last year in a survey conducted by Inter- 

mal Data Corp. (IDC) and Computerworld of 

than 70 recruiters of IT professionals. Keep- 
tats on the hiring process helps make it more 
rly. After all, each hire isn’t an emergency. 

ill starts with knowing how long it takes to 

a person. Even a well-oiled recruiting ma- 

> will take almost two months from identify- 

need to hire someone to receiving an ac- 
pted offer. And this implies that the company 
source of leads and a quick turnaround on 
interviewing. But having a clear understanding of 
the hiring time line helps managers throughout the 
company approach hiring in a systematic manner. 

You must also know how many applicants you 
need in the pipeline to generate a hire. In the 
IDC/Computerworld survey, it took the average 
company 26 qualified résumés to yield three in- 
terviews before hiring someone. Your company 
may have different ratios, but you need to know 
what they are in order to meet your hiring plan. 

But then, you must also know where your best 
hires have come from so you can go to the same 
source again. Did they come in over the transom? 
From employee referrals? Headhunters? Monster.- 
com? The survey found that the most efficient 
channel for hiring — in terms of offers accepted 
per résumés gathered — was employee referral, 
followed by third-party search firms. The least 
efficient was the recruitment job fair. If you con- 
sider the costs of recruiting through each chan- 


nas 





NEWS 


nel, then employee referral and college recruiting 
look pretty good 

These metrics will vary by company. But it’s 
important to keep and use them to refine your 
process. 

Look at it this way. Most companies have elabo- 
rate forecasting and tracking systems for keeping 
the sales pipelines full. They know lead times, 
visits or calls per sale and costs per sale. They 
segment their customers in different demographic 
and statistical groupings, and they pay for leads. 
They call lapsed customers and try to win them 
back. Why should recruiting be any different with 
people who rejected your job offers? Aren’t you 
trying to sell your company to the best potential 


| employees? 


If you’re a manager looking to hire IT profes- 
sionals, your first action item is to find out if your 
HR people keep such statistics. If not, push them 
to do it, or do it yourself. Until you have a process 
and ways to measure its success, you can’t hope 
to improve your recruiting record. D 


WILLIAM 


Don’t forget 
business rules in 
Web migrations 


HE REQUEST seemed simple 

enough. Marketing wanted custo- 

mers to be able to order products 
through the Internet. This meant the 
company needed a Web-based applica- 


M. ULRICH 


| tion to check item availability, issue or- 


der requests, calculate prices and repli- 


| cate a host of other functions that were 
| being performed by legacy applications. 


In response to the request, the project 


team planned to use a tool 
| to capture legacy business 


rules (blocks of condition- 


| al and imperative logic 


that change the state of 


| business data) and import 


them into a Java-based 
front end. While this may 


| seem like an easy answer 
| to a simple request, this 

| project could torpedo In- 
| ternet deployment efforts 
| if it ignores strategic im- 

| plications. 


WILLIAM M. ULRICH is a 
management consultant 
and president of Tactical 

Strategy Group Inc. 
Contact him through 
www.system 
transformation.com. 


There is growing popu- 
larity for legacy business- 
rule reuse as companies move functions to the 
Web. But doing that on a large scale requires 
addressing a number of inherent complexities. 
Legacy rule identification can be difficult be- 
cause of inconsistencies in legacy data definitions 


THE PAPER AND INK USED IN THE ORIGINAL 
PUBLICATION MAY AFFECT THE QUALITY OF 
HE MICROFORM EDITION. 





and the cryptic, redundant nature of the rules 


| themselves. But uncoupling business rules from 


legacy systems is just one hurdle. 

When legacy systems continue to run parallel 
with Internet applications, major synchronization 
problems can occur. For example, a legacy system 
may update customer data one way while an In- 
ternet application may do so another way. This 
could cause unexpected results or delays for 
customers. As more functions move to the Web, 
business-rule synchronization problems can spin 
out of control. 

It takes a comprehensive, enterprisewide coor- 
dination strategy to ensure that business-rule 
capture, reuse and synchronization are managed 
effectively over the long term. And this requires 
answering a few questions. For example 
wg What constitutes a business rule? 

@ How can you reconcile legacy data definition 
inconsistencies? 

@ Can multiple projects synchronize rule identifi 
cation and reuse? 

@ How can you reconcile redundant processing 
results when rules ported to an Internet applica- 
tion continue to run on the mainframe? 

g@ What cataloging scheme can be employed to 
track business rules as they are captured, consoli- 
dated and redeployed? 

How do you deactivate legacy rules that are no 
longer needed? 

Any attempt to reuse legacy business rules as 
part of a Web-based deployment plan must be 
addressed in an overall strategy. This strategy 
must then be communicated to any project team 
involved in capturing and reusing business rules. 

To begin, establish an oversight team to draft 
and deploy a legacy migration strategy. This in- 
cludes creating a concise definition of a business 
rule and a process for identifying, classifying, 
consolidating and reusing rules. This process 
should define how data definitions are used to 
help identify rules and indicate how redundant 
rules and data can be grouped and consolidated 
across multiple stand-alone systems. Because 
there are software tools that support this process, 
the team should also identify a tool to enable 


| rule identification, classification, consolidation 


| and reuse. 


There are two schools of thought regarding 


| rule classification schemes. One says that a 

| scheme should indicate the events triggering a 

| rule within the legacy environment. This pro- 

| vides analysts with a basis of understanding for 
| reapplying those rules in a Web-based environ- 
| ment. But business rule purists argue that a rule 


should stand alone and be classified based on the 
business data it impacts. Whatever scheme you 
choose should store rule definitions in a reposi- 


| tory, indicate where they are used and allow ana- 


lysts to access, add or update rules for ongoing 
Internet migration projects. 
Forming a strategy to capture, classify and 


| reuse business rules requires some front-end 
| investment, but it yields long-term savings as 
| more functions shift to the Internet. Ignoring the 


need for such a migration strategy means driving 
Internet deployment into a sea of chaos. D 
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PACKAGED GOODS 


With deregulation 
looming, utilities are 
choosing less-expensive 
packaged software 
rather than developing 
custom systems. After 
two years of trying to 
develop its own cus- 
tomer information sys- 
tem, BC Gas in Vancou- 
ver, British Columbia, 
chose a packaged appli- 
cation — at about 25% 
the cost of starting from 
scratch. » 36 


IN THE NAVY 


At age 5, Joyce Allen- 
Kendrick dreamed of 
serving as a Marine 
Corps drill sergeant. 
Now, 30 years later, she’s 
the executive officer and 
second in command at 
the U.S. Naval Telecom- 
munications Station in 
Puget Sound, Wash. In 
an interview with Com- 
puterworld’s James Cope, 
Allen-Kendrick com- 
pares her role with that 
of a corporate CIO. » 38 


KNOW YOUR 
ASP’S ASP 


Do you know everything 
about your application 
service provider? What 
about your ASP’s ASP? 
As more service pro- 
viders outsource parts 
of their operations, such 
as customer relationship 
management, possible 
points of failure increase, 
warn analysts. »39 


BEATING OUT 
THE DOT-COMS 


At Widener University, 
IT workers earn about 
20% less than the re- 
gion’s median salary. 
But that hasn’t stopped 
IT director Gary Haber- 





mann from luring top 
talent. The trick tocom- | 
peting with cash-rich 
and hip dot-coms, says 
Habermann, is to tout 
benefits like free tuition 
for employees and their 
families, flexible hours 
and the opportunity to 
play with cutting-edge 
high-tech “toys.” » 42 


STAYING SECURE | 


Too often, security is 

viewed by corporate 

management as an extra | 
hassle to deal with. The | 
problem is that it’s usu- | 
ally reactive. Experts say | 
creating a dream secu- 
rity infrastructure isn’t 
an easy task, but it’s well | 
worth the effort. Here’s 
how it can be done. » 44 


WOOING IT EXECS 


When Howard Schultz, 
founder of Starbucks, 
popped in on an inter- 
view with CIO candi- 
date Ted Della Vecchia, 
it helped convince Della 
Vecchia to take the job. 
Some tips for landing 
high-level IT workers 
include involving top 
executives in interviews, 
offering stock options 
and touting leading- 
edge technology. » 48 


CLOSING THE CLOSING THE GAP | 


As companies scramble 
to find qualified IT 
workers in today’s tight 
job market, JobLink, a 
Bay area program, is 
helping to fill that pool 
of candidates by draw- 
ing more minorities and 
women into IT with free | 
hands-on training, 
writes Ms. MIS.» 52 
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Workstyles 
QuickStudy 
Opinion: Alan Paller 


BUSINES 


SHELLY HOGAN, a former IT auditor, 
says the job is “a partnership rather 
than catching [staff] in the act” 


~SOMEONE TO 
WATCH OVER IT 


HE’S VIEWED WITH SCORN and mistrust by technologists, 
but he’s critical to IT operations. Meet the IT auditor, 
a person with the unenviable task of letting the CIO 
and senior management know when things aren’t run- 
ning right and who’s responsible. But the 

auditor/IT relationship doesn’t have to 

be sour, as IT auditors can attest. It’s just 

a matter of building partnerships. 
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Utility Buys Canned App 
As Deregulation Looms 


Customer information system seen as key 
to keeping costs low, customers informe 


BY MATT HAMBLEN 
HEN FIONA 
Taylor start- 
ed working 
at BC 
Inc. in Cana- 
da four years ago, she and her 


Gas 


co-workers had their work cut 
out for them. 

The Vancouver, British Co- 
lumbia-based company had 
been struggling to work with 
its counterparts in Alberta and 
Ontario to create a shared 
customer information system 
(CIS) to handle all three utili 
ties’ call centers and billing, 
director of 

But the 
tomized system kept expand- 


said Taylor, cus- 


tomer works cus- 
ing in scope, and costs were 
going through the roof, she 
explained. 

“It was a spectacular prob- 
lem for us and left us quite 
risk-averse,” Taylor said. “The 
CIO lost his job over it.” 

So BC Gas gave up on work- 
ing with the other utilities and 
turned to a packaged software 
application instead. 

Bill Swanton, an analyst at 
AMR Research Inc. in Boston, 
if not 
unique, for a utility to buy a 


packaged 


said it’s very unusual, 
CIS. But because of 
the pressures of deregulation, 
he added, utilities are looking 
to save on software develop 
ment and considering cheaper 
packaged systems 

At $24 million, the cost of 
the packaged system that BC 
Gas chose is only about 25% of 
what the company could have 
spent customizing one itself, 
he said. 

And the company expects a 
return on investment because 
of cost savings it expects to see 
in the next four and a half years 
as a result of the new system. 

“All of a sudden, utilities are 
finding that now they can 
make more money by being 
more efficient,” explained 
Swanton. “In the past, they just 
passed software 
ratepayers.” 


costs 


onto 


When BC Gas started look- 
ing for a CIS software vendor 
in 1996, its criteria were rigid. 
The board of directors put a 
cap of $25 million on the proj- 
ect and set a rollout schedule 
of two years, Taylor said. 

The project managers ruled 
out using top-tier CIS vendors, 
whose products would have 
cost more and taken more time 
to implement. 

In 1997, BC 
partnership with Peace Soft 
ware Inc. in New Zealand. The 


Gas entered a 


Chicago Board 


| 


FIONA TAYLOR says BC Gas’ av- 
erage customer call has been re- 
duced by 60 seconds 


utility 


called Energy, partly because 


chose Peace’s system, 


Peace offered guarantees and 
discounts, but also because En- 
ergy had comparative-analysis 
tools designed to help utilities 
move toward deregulation. 


of Trade 


Automates With Euro Rival 


Testing new trading 
system next week 


BY MARIA TROMBLY 
The Chicago Board of Trade 
(CBOT), the world’s largest re- 
maining open-outcry deriva- 
tives exchange, plans to kick 
off testing of its new electron- 
ic-trading system this week. 

The new system, developed 
in partnership with Eurex, a 
rival exchange 
owned by Frankfurt-based 
Deutsche Borse AG and 
Zurich-based SWX Swiss Ex- 
change, will let traders see Eu- 
rex and CBOT data the 
same screen and will permit 
than 
CBOT’s current electronic sys- 
tem, Project A. 

The testing, set for launch 
today and scheduled to go live 
this quarter, comes at a time of 
massive _ restructuring 
CBOT. 

Last month, more than 90% 
of CBOT members voted in fa- 
vor of splitting the exchange 
into two for-profit companies 
— tentatively called CBOT and 
eCBOT — in a first step toward 


derivatives 


on 


higher trade volumes 


for 


a possible initial public offering. 

Like the New York Stock Ex 
change, CBOT is owned by its 
members. It doesn’t offer a 
sell actual stocks, 
Instead, CBOT 


trade contracts for 


place to 
however. lets 
members 
the future purchases of prod- 
like 
modities or 
bonds. 


ucts agricultural com- 


U.S. Treasury 

If CBOT becomes a for-prof- 
it company, it will be able to 
move more aggressively to- 
ward electronic trading, said 
Dana Stiffler, an analyst at 
Newton, Mass.-based Meridi- 
en Research Inc. 

Currently, only 5% of CBOT 
trades are made electronically 
the exchange has 
priced electronic trades sever- 


because 


al times higher than traditional 
trades — a deliberate tactic to 
keep business from being tak- 
en away from CBOT’s floor- 
trader members. 

According to CBOT spokes- 
woman Katherine Spring, 
members pay 3 cents per trade 
($1 for retail customers) using 
the traditional open-outcry 
system, compared with 23 
cents ($4 for retail customers) 
on the old electronic platform, 


BC Gas’ March 1999 pilot of 


the Energy system was suc- 
cessful, and the utility installed 
the system three months ago in 
its 77-agent call center in 
Prince George, British Colum- 
bia, which handles 250,000 
customer accounts. 
Customers can now access 
their account information or 
change service via the Web, and 
call center agents have an ex- 
panded Web-based database of 
information at their fingertips. 
BC Gas plans to expand the 
Energy system to all 750,000 
of its customers by next 
spring, when it will deploy the 
software at a 120-agent call 
center in Kelowna, British Co- 


which is known as Project A. 

“But the [member] 
firms have become less and 
less vocal because they realize 
that this is the way it’s going to 
be,” Stiffler said. 

With the restructuring, said 
Spring, eCBOT would be able 


to set its own prices for elec- 


local 


tronic trading. 

The new system — and the 
planned shift to decimal-based 
pricing next April — ex- 
pected to generate more vol- 
ume for the exchange. Accord- 
ing to Spring, Project A wasn’t 
capable of handling higher vol- 


are 


f 


THE CHICAGO BOARD OF TRADE s 
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lumbia, according to Taylor. 

The system was a bit diffi- 
cult to implement, in part be- 
cause it required changes in 
business practices. But it was 
worth it. 

For example, in the past, if a 
asked for informa- 
tion, either the call center or 
the billing department would 
send out a brochure, but nei- 
ther unit was responsible for 
tracking that a brochure was 
sent. Now, the back office 
sends out brochures from a sin- 
gle location, and the call center 
tracks all requests, Taylor said. 

And agents can now access 
all customer information on a 
Web-based browser as soon as 
a person e-mails or telephones 
the company. With the 
system, agents have seen a 60- 
second reduction in the aver- 


customer 


new 


age customer call, Taylor said. 

“It’s been amazingly 
cessful, but I’m waiting every 
day for the other shoe to fall,” 
she added. D 


suc- 


Currently, 75% of CBOT’s 
volume is from member firms 
that belong to both CBOT and 
Eurex. 

The Eurex platform, which 
has been in development since 
the fall, allows members of the 
world’s two largest derivatives 
exchanges to be on screen at 
the same time, and it lets them 
the information 
their clients. 

The old system, on the other 
hand, required a dedicated ter- 
minal, which took up more 
It also restricted the 
ability of traders to customize 


pass on to 


space. 


hould see higher trade volume after 


merging systems with its rival European exchange, Eurex 


umes. It would have cost 
CBOT $47 million to revamp it. 
So CBOT instead decided to go 
with the Eurex platform for $50 
million. 

“The Eurex system was the 
most scalable and had a proven 
track record,” Spring said. 


front ends to give clients infor- 
mation, Spring said. 

After the system goes live, 
the next step for the two ex- 
changes will be an alliance 
with an as-yet-undetermined 
partner in Asia, according to 
Spring.» 
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THERE, YOU’VE JUST BUIL 


Now there's a fast, easy way to put the “e” in your business. Introducing Aspect” eBusiness Architect, the revolutionary new 





Eas 


development tool that takes you from imagination to application. ..in no time. eBusiness Architect provides a complete menu 
of pre-compiled, reusable common objects to let you quickly create eFlows: visual representations of your business rules 
that integrate your multimedia contact center, front- and back-office systems, and future applications into. one 
centrally managed eBusiness. The result: dramatically improved and integrated eCommerce and eCRM capabilities. All 
without complicated code or costly deployment. Aspect eBusiness Architect. Suddenly, this whole eBusiness thing just clicks. 
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The Starting Point for eBusiness 
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Pacific Ocean Is This Navy 
IT Officer’s Enterprise 


She sees similarities to corporate IT, but scale varies 


T ONLY Lt. Cmdr. Joyce 
Ailen-Kendrick has respon- 
sibilities that would give 

pause to some civilian 

CIOs. Allen-Kendrick is 
the officer and second in 
command at the U.S. Naval Computer 


Station in 


executive 
and Telecommunications 
Puget Sound, Wash. She was just select- 
ed for commander and will be promot 
ed to that rank in December. 
Computerworld’s James Cope recent 

ly spoke with Allen-Kendrick about her 
career and how the information tech- 
nology challenges she faces compare 
with those of her civilian counterparts. 


Q: How does your role as executive officer of 


a major Navy communications installation 
compare to that of a civilian CIO? 

A: The military IT infrastructure isn’t 
all that different than on the civilian 
side. We use off-the-shelf software like 
Microsoft Office. I need to keep up-to- 
date on the latest and greatest tech- 
nologies and ensure that we're follow- 
ing industry standards. Training is also 
important. 


Q: Are there any differences between civilian 
and military IT? 

A: Our reaction time [in implementing 
new technologies] is slower. To some 
extent, that’s the way government 
works. But we’re also looking at PCs on 
every Navy desktop, including those at 


LCM SMS eae 


STOTT CM mel yA UR Rel nIT Dg 


The Power to Know 


csas. 


e-Intelligence 


sea. And we're talking 369,000 people. 


Q: Any other differences? 

A: Well, there’s money. . .. We have to 
work within our budget constraints. 
And we're competing for the same tal- 
ent pool but [offer] fewer incentives. 


Q: What's your main leadership challenge? 

A: Strategic planning. . . . You have to 
put people who report to you in a vi- 
sionary mode instead of a reactionary 
mode. This is the best job I’ve had. I | 
have a lot of strategic thinkers on staff. 


Q: Any hot projects in the works? 

A: Indeed. It’s the Defense Messaging 
System (DMS). This is a modern mes- 
saging system that’s an alternative to 
many legacy e-mail applications now 
used by the Department of Defense. 


Q: What's different about DMS? 

A: All communications will occur in 
real time and will be delivered directly 
to the recipient’s desktop. 


| Q: How do you deal with security issues? 


A: We have the same challenges that 
companies have. For example, we got 
the “I Love You” virus but fixed it early. 

Keep in mind we really do work 24 
hours a day, seven days a week and can 


Banks Market to 
Small Businesses | 


BY MARIA TROMBLY 


Small businesses have traditionally 


been given the cold shoulder by large 


| banks. But thanks to new offerings from 


electronic banking vendors, things are 
beginning to change, according to a 
Cambridge, 
Mass.-based Celent Communications. 


new report issued by 

Small businesses can be a boon for 
banks because they have higher bal- 
ances, make more transactions and bor- 
row 
Celent analyst Meredith Hickman. 

These characteristics — combined 
with Internet growth — have pushed 
small-business needs to the forefront of | 
many 
she said. 

Among the services banks offer are 


more than retail customers, said 


banks’ e-commerce strategies, 


browser-based account access, online 
payroll, small-business portals and 
wireless access to banking information, 
said Hickman. 
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deal with these issues much more 


quickly. 


Q: Why the Navy? Couldn’t you make more 
money as a civilian IT manager? ' 
A: I think about that. But I always want- 
ed to be in the military. When I was 5 
years old, I wanted to be a Marine 
Corps drill sergeant. 

We provide computer and telecom- 
munications services to all the Navy 
commands in the Pacific Northwest — 
aircraft, submarines, surface ships — a 
total of 23,000 people. 

I feel like what I’m doing for my 
country is important. There will be op- 
portunities after the military. I’m living 


my life’s dream right now. D 


i 


NAVY IT IS SIMILAR TO CIVILIAN IT; it’s 


| the content and mission that are different, 


says Lt. Cmdr. Joyce Allen-Kendrick 


Part of what makes this possible is 
the proliferation of ready-to-use elec- 
tronic banking service providers. 

The top vendor, according to Hick- 
man, is Sl] Corp. in Atlanta, which has 
more than 300 banking clients using the 
cash-management system from its Q 
Up subsidiary in Austin, Texas. 

The next biggest operator is Digital 
Insight Corp. in Calabasas, Calif., with 
160 companies utilizing its Axis Cash 
Management system. 

The only other firm of the 14 Hick- 
man ranked that boasted more than 100 
clients was FundsXpress Financial Net- 
work Inc. The Austin-based company 
reported 119 clients using its Funds- 
Xpress Commercial Banking product. 

Of the three firms, Digital Insight of. 
fered the most services, such as 
automated 


ac- 
reconciliation and 
sweep instructions. 

Paul Jamieson, an analyst at Lincoln, 
Mass.-based Gomez Advisors Inc., dis- 
agreed with the report, saying that most 
banks see small businesses “as a crucial 
and very profitable market.” Though as 
far as online operations are concerned, 
Jamieson said, “the demand for online 
services has not met expectations.” D 


count 





COMPUTERWORLD July 17, 2000 


ASPs’ Outsourcing Raises Risks for Clients 


BY JULEKHA DASH 

Some application service pro- 
viders (ASP) are relying on 
hosted services themselves to 
help manage their 
businesses, a trend users need 


growing 


to be cautious of, say analysts. 

Industry experts warn that 
relying on an ASP that itself re 
lies on 
provider can increase the risk 
for customers. As a result, buy- 
ers need to ask for detailed ser- 
vice-level agreements and 
make their ASPs have 
similar agreements with their 
own providers. 

Frank Zamani, CEO of San 
Jose-based database hosting 
service Caspio Inc., plans to 
hire an ASP to provide remote- 
ly hosted customer relation- 
ship management (CRM) soft- 
ware that will track his grow- 
ing list of clients. 

CRM software is particular- 
ly useful to a growing services 
business because it tracks cus- 
tomer information and thereby 
allows a company to improve 
its own service levels, which 
are the measure by which 
ASPs are judged, according to 
Amy Levy, an analyst at Sum- 
mit Strategies Inc. in Boston. 

In an ASP arrangement, 
users pay a monthly subscrip- 
tion fee to access applications 
via the Internet or a virtual pri- 
vate network. 


an outside service 


sure 


Double Hosting Yields Savings 

Zamani said hiring an out- 
side firm to supply a CRM ap- 
plication would give him ac- 
cess to customer information 
in a matter of days rather than 
months. It also would save him 
from spending a lot of money 
up front and hiring people to 
support the application. 

“Hiring IT staff is very diffi- 
cult. When you get them, you 
want them to focus on your 
core business,” he said. 

Normal Liang, CEO of Lo- 
calMIS.com Inc. in New York, 
said he also plans to buy CRM 
services from an ASP within 
six to nine months. LocalMIS 
is an ASP that targets small and 
medium-size businesses in 
certain vertical markets and 
relies on resellers to distribute 
its services. 

Like Zamani, Liang said he 
believes using an ASP would 
mean faster implementation, 
particularly if the ASP also of- 
fers training and consulting 
services. 





These relationships among 
ASPs make it even more im- 
portant than 
users to get bulletproof ser 


usual for end 


WeE 


New Horizons ¢ 


vice-level agreements, accord- 
ing to Peter Bendor-Samuel, 
CEO of The Everest Group, a 
Dallas-based consulting firm. 


CAN TAKS 


he iF you kee p up with tec hnol PV ind 


improve eficienc 


ind productivity 


Exceptional classroom training. 


Students learn from qualified instructors 


Classes are conducted in comfortable, 


well-equipped classrooms with one com 


puter per student 


Convenient technology-based training. Stimulating, 


interactive learning using the Web or CD 


schedules and pace 


Students set 


Accommodating on-site training. You set the time 


ind class size. We come t 


ind computers 


More courses at more times. All the applications and 


technical certification courses you need 


your location with an instructor 


days, evenings 


ind weekends. We do more Microsoft technical training 


ind certification than any other company 


mputer Learning Centers 


_ BUSINESS 


For instance, if a company 
CRM 
vider that in turn selects an 


selects a service pro- 


outsourcer te host its servers, 
there are more potential points 
of failure that could leave an 
end user stuck, he said. 


H 


More centers. Conveniently | 


ind wound the worid 


39 


Levy added that contracts 
with ASPs should include pro 
visions that allow end-user 
companies to be compensated 


for downtime 
the primary ASP but also from 


not only from 


iny service it employs. D 


Telephone assistance 24 hours a day, 7 days a week. 


For 60 days following applications « 


Guaranteed results. Students ma 


courses free of charge within six m 


technical certification test-pass guar 


For a center near you, call 1-800-PC-LEARN today. 
Or visit newhorizons.com on the Web. 


New Horizons’ 


Computer Learning Centers 


World leader in computer training. 
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ALAN PALLER 


What It’s Like to Work at. . . 
Hecklers Entertainment 


Interviewee: Darren Nelson, 
chief technology officer 
Company: Hecklers Entertain- 
ment Inc., a producer of desti- 
nation sites for America Online 
Inc. and the Web 

Main location: Birmingham 
Ala 

Number of information 
technology employees: 
Three, including Nelson 

IT hiring plans: “I'll probably 
tant to handle more 
of the miscellaneous issues. It 
will be someone who | can train 
- not a certified Microsoft pro- 
fessional, but basically a geek 
who's into computers.” 
Number of employees (end 
users): About 35. “We've dou- 
bled the staff in the last five 
months.” 

Average age of staff: 

24 to 25 

Web traffic: 2 million unique 
visitors per month for all the 
sites combined 

New IT initiatives: “I'm fo- 
cusing about 90% of my time 
on evaluating and selecting a 
new content management and 
delivery system. Our second pri- 
ority is organizing our internal IT 
systems ~ deciding who will be 
responsible, which ones we'll 
outsource and which we'll do 
ourselves.” 

What are your goals with 
content management and 
delivery? “We've gotten by on 
a limited budget to date, and 
now we need to upgrade to 
compete with a lot of the func- 
tionality that other sites have al- 
ready. We want to minimize er- 
rors, make consistency a priority 
and polish the presentation of 
the content we have already 
We also want more personaliza 
tion features. And wireless is a 
big effort.” 

Initial public offering plans: 
“That's the ultimate goal. We 
recently had a big round of 
financing.” 

Stock options: “We want to 
give everyone a chance to own 
part of the company and make 
sure we are all working in the 
same direction to meet common 
goals. Stock options create a 
team atmosphere.” 

How formal are the em- 
ployee reviews? “We're get- 
ting more and more formalized 
as we go. Until about six 
months ago, we were all wear- 
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ing a lot of hats. We didn’t have 
a dedicated [human resources] 
person, so we just did the best 
we could. Now that we have an 
HR person, those things are 
falling in place.” 

Dress code: Casual 
Workday: “I arrive about 6:45 
a.m. and leave about 6 p.m. My 
staff arrives between 8:30 and 
9 and leaves around 5 or 5:30.” 
Why do they work fewer 
hours? “Their schedule is up to 
them - you get out of it what 
you put into it.” 

Computers: “There's not a sin- 
gle standard. The gamers get 
higher-end systems with the 
most recent processors and 
video cards so they can play the 
latest games. Most people get 
standard office PCs.” 

Must peopie carry beep- 
ers? Cell phones? “| don't 
have to, but | do. We communi- 
cate a lot through [AOL's] In- 
stant Messaging. I'm logged 


onto AOL at least 12 hours a day | 


here, and again at home.” 
Percentage of staff that 
telecommutes on a given 
day: “The majority work here in 
the office, but we have remote 
staffers in Joplin, Mo., Chicago, 
Boston and California.” 
On-site amenities: Myriad 
video-game systems and a 
recreation room with a video 
game player hooked up to a 
large LCD screen. “We have a 
Dreamcast instead of a basket- 
ball hoop.” 

With a name like Hecklers, 
is work a constant laugh- 
fest? “No, but we definitely try 
to make it as fun as possible. 
Sometimes from my office | can 
hear [one of the company’s 
voice talents] in the lounge do- 
ing cartoon voices. Or when we 
post new content, you'll see 
people gathered around a com- 
puter laughing at it.” 

Little perks: “We get a lot of 
free beta copies of games being 
developed. We already have a 


Sony PlayStation 2, which won't | 


be released in the U.S. until 
September. Occasionally we 
have a themed workday, like 
Hat Day.” 
Would employees feel com- 
fortable e-mailing the CEO, 
Hank Suerth? “Sure, there's 
an open-door policy.” 
- Leslie Goff 
(Igoff@ixnetcom.com) 
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A security skills test 


Y WIFE DOESN’T LET me do any electrical work 
around the house. Smart woman. 

Despite my engineering degrees from Cornell and 
MIT and my professional engineer’s license, I don’t 
have the requisite knowledge to be a competent 


electrician. I’ve never been trained to do that 
type of work; I don’t know the accepted prac- 
tices or where hidden dangers lie. If I were to | 
claim such expertise and take responsibility for 
electrical systems, I could hurt or kill people. 
Unskilled computer security people also do 
harm. They hurt their organizations by allowing 
others to steal credit-card information and oth- 
er important data or to put the computer-based 


parts of their organization out of business for 
short or long periods of time. And they can 


The recent distributed denial-of-service at- 
tacks on sites such as eBay and Yahoo were di- 
rectly enabled by security mistakes almost cer- 
tainly made by unskilled systems administra- 
tors at the University of California at Santa Bar- 
bara and other universities and institutions. | 

Similarly, unskilled information 
security officers are taking respon- 
sibility for managing the security 
of major systems. Because they 
don’t know how to secure them, 


| 
| 
| 
| 
damage other organizations. 


they create policies that no sys- 
tems administrator can implement 
and then blame the administrators 
when security is breached. 

Neither systems and network 
administrators nor information se- 
curity officers have been asked to 
prove that they know how to se- 
cure their Internet-connected sys- 
tems. And they haven’t been given 
the time to train for their jobs. 
Without the confidence that 
builds with adequate training, 
they’re uncomfortable demanding 
the resources needed to keep sys- 
tems safe. They go along day to 
day telling management that 
everything looks OK, all the while 
holding their breath. 

It’s time to stop the charade. 

The first person to publicly de- 
scribe the damage being done by 
untrained security people was 
Stephen Northcutt, who headed information | 
warfare at the U.S. Ballistic Missile Defense Or- 
ganization and now heads the SANS Institute’s | 
Global Incident Analysis Center. For the past | 
year, Northcutt and a team of global security 
leaders have collaborated to identify the mini- | 
mum necessary skills — what they call “securi- 
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ty essentials.” One of his team leaders provided 
a set of exemplary questions that organizations 
can ask their information security officers and 
systems administrators to determine whether 
they have the essential skills necessary to be 
considered minimally qualified for the most ba- 
sic sysadmin and security jobs: 

1. Which of the 10 most critical Internet security 
vulnerabilities as published by the FBI and SANS 
(see www.sans.org/topten.htm) are present on 
each of your Internet-connected computers? Why 
is each one dangerous? The answers will help 
determine whether the person knows what the 
biggest security threats are and whether those 
threats affect his organization. 

2. What specific events are and are not being au- 
dited on each system? What tool is monitoring 
and analyzing the audit logs? What has it found 
in the last 24 hours? This helps de- 
termine whether you have an ongo- 
ing security monitoring activity. 

3. When was the last time you 
checked the system backups to be 
certain they restored files accurate- 
ly? How frequently is each system 
backed up? If you were called in dur- 
ing a security emergency, would you 
be able to do a backup to retain the 
data for later analysis? This verifies 
that the person knows and acts on 
the knowledge that the greatest 
damage from security incidents is 
often a loss of information that 
could have been avoided had back- 
ups been current and uncorrupted. 
4. What protocols and ports are be- 
ing blocked by the firewall for both 
incoming and outgoing traffic? Is 
that sufficient? This verifies that 
the person has an understanding of 
basic perimeter protection. 

These aren’t the only questions 
that will determine the knowledge 
and skills of sysadmins and securi- 
ty professionals, but they can serve 
as an early-warning system to iden- 
tify dangerous skills shortages. Though IT man- 
agers may not be able to secure their systems, 
they can be held responsible for ensuring that 
the people they hire are minimally qualified. D 


Paller is research director at the SANS Institute in 
Bethesda, Md. Contact him at alanpaller@aol.com. 
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Companies without stock options 

are finding new ways to outcompete 
dot-coms for talent, putting their focus | 
on leading technologies, training and 
fun environments. By Julia King 


OU HAVE NO STOCK OPTIONS to offer. 
There’s no pinball machine or air 
hockey table in the coffee room. You 
prefer that workers leave their dogs 
at home. And your company is in an 
industry with a low glamour factor — 
say, groceries or insurance. 

In short, you're a dot-not. 

So how do you compete for the scarce information 
technology professionals that virtually everyone — 
most notably much higher-paying and far hipper dot- 
com companies — are trying to attract and retain? 

At Widener University, a private, 2,400-student 
college in Chester, Pa., luring such talent is certainly 
not done with money. Salaries for some of the uni- 
versity’s IT workers fall as much as 20% below the 
region’s median pay rate. 

Yet in the past few years, Gary Habermann, direc- 
tor of technical resources, can recali losing only two 
IT employees to dot-coms. 

His secret: “I’ve tried to put together an environ- 
ment that makes it fun for people to come to work,” 
he says. “I try to pay them to play with toys.” 

Other dot-nots are luring technical talent with the 


promise of ultraflexible working hours, a casual work | 


environment and a better work/life balance. 

At Widener, the university’s high-tech toys are lo- 
cated mainly in a $4 million technology lab. The lab 
houses hardware and software, such as technology 


for streaming video applications that Widener’s IT 
staffers get to experiment with as much as six 
months before it hits the market. 

“We're a huge believer in alpha and beta testing 
because it’s my belief that if we’re going to use a 
product, we should know it better than the engineers | 
who built it,” Habermann says. 

By forging relationships with multiple vendors, 
“We've earned a reputation as reliable testers,” 
Habermann says. The hardware and software that 
make the grade usually end up in the university’s 
10,000-node network, which spans 90 buildings and 
runs voice, data and video applications. Habermann 
has also contracted for Widener to provide technical 
and network support, which includes purchasing 
PCs, to 12 local school districts. 


Passing Along the Perks 

Because of the huge volume of business he gener- 
ates for vendors that supply all the equipment, 
Habermann is able to buy the gear at a substantial 
discount. He can then pass the savings on to his 
staffers in the form of bonuses and salary increases 
to help bring both in line with the local market. 

Other perks include casual dress, flexible hours 
and free tuition for employees, their spouses and 
their children. “I just hired an engineer away from 
Nortel because he has two girls who in another few 
years will be ready to start college,” Habermann says. 
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“If you've got kids and need to put them through 
school, you can’t beat working for an educational 
institution.” 

Also, measured in pretax dollars, tuition at Widen- 
er costs $16,000 per year, so for two children, that 
represents an additional $32,000 — an annual bonus 
most IT workers, even those at dot-coms, aren’t guar- 
anteed to receive in cash, Habermann says. 

Boll Homa, CIO at Hannaford Brothers Co., a chain 
of 155 grocery stores based in Portland, Maine, says 
he also believes in touting the company’s leading- 
edge technologies to both prospective and current 
IT staff. More so than money or stock options, new 
technologies are what often appeal to technically 
oriented workers, Homa says. 

For example, Hannaford is about to launch a pilot 
project deploying wireless technology and two-dimen- 
sional product codes in its stores. It’s part of a longer- 
term supply-chain project to do computer-assisted 
reordering based on point-of-sale data. 

“We do talk about this during the interview pro- 
cess,” Homa says. “We try to make them see that if 
they want new technology, they don’t have to go to 
a dot-com.” 

He concedes that there are “not too many dot-coms 
in Maine,” but the competition with them for IT 
talent has nonetheless been fierce because Boston’s 
dot-coms are less than two hours away. 

Homa, who moved to Maine three years ago from 
his home in Connecticut and a previous job for which 
he commuted 50 miles to New Jersey, also empha- 
sizes the quality of life in Maine. “It’s very inexpen- 
sive to live here,” he says. “There’s low crime, good 
schools and access to incredible sports all year long.” 

Homa’s recruiting efforts have largely succeeded, 
he says, “by giving people access to interesting things 
to work on and by implementing technologies that 
have a true impact on the business so people can 
see a direct correlation between their work and the 
business.” 

Just 45 miles west of Boston, Allmerica Financial 
Corp. in Worcester, Mass., faces even stiffer competi- 
tion from big-city dot-coms. To help attract and re- 
tain IT talent, the company has instituted several 
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new compensation and training programs. 


As a result of those programs, the IT staff turnover GARY HABERMANN at Widener Univer- 
rate has dropped from more than 20% to 10% in the sity can’t offer employees the same high 
past two years, according to former CIO Robert salaries as dot-coms, so “I try to pay 
Bruce. (He recent rt / ica to seek a position them to play with toys,” he says 
in operations at a technology company.) 

Among other things, Allmerica tripled its IT train- 
ing budget to give staffers access to new technologies. 

On the salary side, the company completely revamped 
its compensation programs, including upgrading 
salaries to bring them in line with market levels. To 
establish these levels, Allmerica “much more sely” 
scrutinizes multiple salary surveys and studies them 
twice annually. Before, it reviewed surveys only once 
a year, Bruce says. 

The company also implemented a bonus program 
for workers whose skills may not be leading-edge but 
are nonetheless in high demand. These include Ora- 
cle database administrators, network administrators 
and C++ programmers, who are paid bonuses ranging 
between $1,000 and $3,000 every fiscal quarter. 

The program is administered by senior technical 
experts, who are in the best position to gauge which 
skills are most in demand based on the level of diffi- 
culty they may be having staffing a particular project, 
rather than by IT managers, says Bruce. 


Opportunity Cost 


In contrast, IT employees with dot-com experience 
say that many dot-coms are under too much time 
pressure to have their technical experts closely con- 
sider co-workers’ skills, much less help z nister 
employee retention programs. 

Margaret Schweer, director of IT human resources 
at Northfield, Ill.-based Kraft Foods Inc she be- 
lieves a company’s IT salary dollars are best spent re- 
taining the best IT talent rather than trying to prevent 
workers from heeding the siren song of dot-coms. 

Schweer maintains that at best, IT managers and 
corporations in general can influence perhaps 20% of 
what goes into an employee’s decision to flee for a 
dot-com or any other company. “It’s the market that’s 
driving turnover. Turnover happens. Just get over it,” 

says, adding that it pays to try to control the 
“flow and direction” of staff turnover rather than 
trying to halt it altogether. 

So forget about copycat pinball machines or all-day 
cappuccino service. There are some very basic things 
that companies can do to compete on the ele 
as dot-coms during the recruiting process, especially 
when college graduates are the target group. 

One way to compete is to act more swiftly than 
large corporations are accustomed to acting. Dot- 
coms typically notify prospective employees of a hir- 
ing decision within 48 hours. Larger companies need 
to do more of the same, Schweer says. “It’s a new 
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economy, but we [larger, non-dot-com companies] 
still work on envelope time. That has to change.” D 
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Security infrastructures are full 

of holes, but most of them are 
human, not technological. Security 
experts don’t make the decisions, 
and the people who do are tired of 
listening to them. It’s time to change 
that. By Deborah Radcliff 


ECURITY AT MOST businesses today is 
broken. Intrusion and virus detection 
measures react to threats only after 
they’ve been discovered in the wild. 
Firewalls bog down traffic, not to men- 
tion that they have security vulnerabil- 
ities of their own. And because there 
are so many points of vulnerability 
across an enterprise, no one’s really 
managing it all. Point products plug 
specific holes but don’t talk to one an- 
other, making a bad situation worse. 
Problems like these leave a bad taste in the mouths 
of most corporate executives, who see security as 
clumsy, reactive and confining, rather than the pro- 
tective cover security managers say it can be to help 
businesses advance online quickly and safely. 
“People try to ignore security because they per- 
ceive it as something that will make their tasks more 
difficult,” explains Ian Poynter, president of security 
consulting firm Jerboa Inc. in Cambridge Mass. 


OVERCOMING 
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“We'd like to see security as an enabler so you can 
actually use it as a selling point to your senior man- 
agement.” 

So security managers say their real challenge is to 
put information security in its rightful place as a way 
to make business work, not slow it down. That 
means creating a proactive, scalable and flexible se 
curity infrastructure that’s ready to accommodate 
new applications, mergers and other network 
changes in real time, according to John Pescatore, an 
analyst at Gartner Group Inc. in Stamford, Conn. 
(Technology, July 10]. 

And therein lies the vicious circle: How do securi- 
ty managers sell a network upgrade when security al- 
ready has such a bad reputation? 

It’ll take a change in corporate culture. 


Start With the Simple 


The first level of change is teaching non-IT people 
that data security is a problem that must be ad- 
dressed in the physical world, not just in a technical 
context, says Pete van De Gohn, chief security offi- 
cer at Enron Energy Services in Houston. “You need 
an integrated approach where all of your employees 
understand the value of the information that they 
have and correctly label it, whether it’s a physical or 
a logical medium,” he says. 

Van De Gohm, who manages both information and 
operational security at Enron, says he practices what 
he preaches. 

The deregulated energy industry is fiercely com- 
petitive. So van De Gohm designed the physical lay- 
out of Enron’s offices so there’s no outside entry near 
the mergers and acquisitions department. This way, 
he physically protected a key area in which the com- 
pany’s most important competitive data is stored and 
processed. 

During the past two years, the Federal Reserve 
Bank of New York has also rolled out an aggressive 
program to educate and inform users, business man- 
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agers, executives and even armed guards about the 
way digitized assets can be compromised. 

But to make them understand, you have to learn 
their concerns and explain the situation in ways they 
can understand and put to practical use, says Jenean 
Paschalidas, director of security training and policy 
enforcement at the New York Federal Reserve. 

Paschalidas has gone so far as to compare the 
bank’s digitized money to that of the gold bullion in 
the bank’s basement vault. That comparison helps 
the bank’s armed guards realize how important it is 
to guard modem ports and check for disks and lap- 
tops that people carry out of the bank’s Manhattan 
buildings. 

The bank also has adopted a strong user education 
program — the type of program that should be the 
linchpin of any organization’s security policy, ac- 
cording to John Lucich, president of the High Tech 
Crimes Network (www.htcn.org). 

For companies that don’t have as many resources 
as the Federal Reserve, Lucich suggests using tech- 
nology to help enforce user policy. 

“We talk about segmentation, demilitarized zones 
and other elements of a secure architecture. But then 
end users have access to anything they want, even 
though you wouldn't let your servers have that ac- 
cess,” Lucich explains. “So end users should be seg- 
mented through a firewall inside the network that 
won't let them do unsafe things.” 


Changing From Within 

Just as important to this employee education 
process is the technical staff, many of whom commit 
security gaffes of their own (like punching holes 
through firewalls to let certain types of traffic in to 
support new applications, or downloading cool tech- 
nical stuff they shouldn't). 

“Once employees are aware of the value of their 
intellectual property, then those who design the 
technical infrastructure can see how this information 
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logically goes through the network and see all the 


possible ways that information can be vulnerable,” 
van De Gohm explains. “Then they use technology to 
mitigate those vulnerabilities.” 

For example, the vast majority of vulnerabilities 
reside in the application code itself. So some of the 
most intensive training should be offered to the pro- 
gramming team so programmers can learn how to 
develop code that’s free of common vulnerabilities, 
says Poynter. 

In fact, all change control policy should formally 
include security sign-off on projects, says Paul 
Raines, vice president of information asset protec- 
tion at the Federal Reserve Bank of New York. 

“This is one of the most difficult challenges a secu- 
rity manager has,” Raines explains. “Developers 
don’t know security. But they don’t like security peo- 
ple hanging around because they think the security 
staff holds things up.” 

So the security manager must get buy-in from the 
top, he says. But the people at the top won’t buy in to 
processes that may not be able to keep up with the 
flow of business 

“Are you going to tell your stockholders that we 
decided to delay our next version for three months 
while we figure out the security bugs?” Raines asks. 
“No. Most companies put applications on the Web 
and let hackers do the beta testing on the security 
holes.” 

This is why it’s important to change the mind-set 
of the security group from one that bogs down busi- 
ness to one that enables business, Pescatore says. 

“Too many security groups are focused on audit- 
ing problems vs. proactive enablement of business,” 
he explains. “The security group needs to change 
from being the group that says ‘no’ at the end of a 
project to the group that gets involved in the begin- 
ning of a project by building secure hooks into the 
infrastructure.” 

That means developing review processes and 
tweaking the infrastructure to keep pace with busi- 
ness development cycles, from concept through 
change management and beyond, Poynter adds. 

For example, businesses today are grappling with a 
proliferation of wireless devices like the personal 
digital assistants and cellular phones that are now 
accessing their networks. Obviously, these devices 
are becoming valuable business enablers by support- 
ing all types of remote inventory and order-entry ap- 
plications. But it’s nearly impossible to authenticate 
and grant privileges to these devices because their 
ability to use passwords, user names or encryption is 
almost nonexistent. 

So, instead of inhibiting business flow by saying, 
“No handheld access devices because they’re inse- 
cure,” the security manager can raise questions that 
would solve the user problem while minimizing risk 
— questions like, “Should we allow all of our users in 
from all these devices? Should we let them do all 
things from these devices?” says Pescatore. 


Erasing the Security Lines 

As security personnel learn to work proactively 
with other business and IT departments, their next 
payoff will be a merging of IT roles and responsibili- 
ties, Lucich contends. 

“You can’t have these segmented IT domains 
where the leader of each domain doesn’t answer to 
anyone in another domain,” Lucich explains. “Every- 
one talks about the coming convergence of technolo- 


PETE VAN DE GOHM at Enron Energy Services espouses 
an integrated approach to security 
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WHERE'S YOUR | 
WEAK LINK? 


NO MATTER HOW PROACTIVE your security infrastruc- 
ture may be, there's still the weakest link to think about - 
the company’s human population. 

Therefore, security policy is key to making or breaking 
an organization's information-protection measures, says 
Paul Raines, vice president of information asset protection 
at the Federal Reserve Bank of New York. That's why 
Raines’ organization enforces a strong security policy 
throughout the user population. 

Start by keeping the policy simple, Raines suggests. 
Put it in language that users understand. And keep it 
short. (Raines’ group keeps its user policies to two or 
three pages.) Key points to consider, he says, include the 
following: 

w Avoid unauthorized access to resources outside the 
company's network. 

w Don't allow people to transport intellectual property 
outside the company. 

w Use strong alphanumeric passwords, update them reg- 
ularly, don’t share them with anyone and don’t hide them 
near computers. To avoid forgetting, Raines advises using 
passwords that sound familiar when spoken, like ipa2thfig 
(“I pledge allegiance to the flag”). 

ta For road warriors on laptops, use application-level 
encryption, work off disks and keep them with you, or 
remove and vault the hard drive. 

# Don't put any sensitive data on handhelds. If they can 
access the network, install password programs on them. 
# Delete user accounts upon employee termination and 
recover all equipment used by that employee to access 
the network. 

At the network level, Raines also advises periodic se- 
curity tests - everything from war dialing (automated call- 
ing of banks of phone numbers) in order to find undocu- 
mented modems to encrypting stored data on servers and 
checking password strength with password-cracking 
tools. - Deborah Radcliff 
gies. Sooner or later, you'll also see the convergence 
of responsibilities Then there needs to be a chief se 
curity officer who says, ‘I’m the one in charge of this 
infrastructure, and the key pinnacle here is 
security.’ ” 

But to make this cultural change, security man 
agers must drop their hard-line stances on “bullet- 
proof” security and learn to manage risk, Raines 
says. That means levels of security will be different 
for every situation, depending on what you most 
need to protect, what resources you're willing to put 
toward that protection and what you're willing to 
risk to allow business processes to flourish. 

If security professionals can show others in the or- 
ganization that they can balance the needs of busi- 
ness against risk and protection, then it won't be long 
until they’re invited into the boardroom to articulate 
security issues, Raines says. 

Only when all these elements — awareness, inte- 
gration and boardroom buy-in — come together can 
security managers push their agendas toward build- 
ing a comprehensible, flexible security architecture. 

So say goodbye to the fortress mentality — guns, 
locks, fences and dogs, says van De Gohm. And, he 
adds, work to get everyone on the same page: “The 
integrated approach is the best security process 
there is.” D 
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Last year, computer hackers 
cost businesses 45 billion dollars. 
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Introducing beTRUSTed i 


With advanced levels of security and verification, 
people all across the European Union are sending 
and securing everything from multi-million dollar 
transactions to single e-mails. Now you can too. The 
doors.of global e-commerce are finally wide open. 
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T Leader? 


Demand is strong for corporate IT 
executives, and it will take more than 
an attractive pay package to land the 
person you want. Here are seven 
strategies. By Alan Horowitz 


§ ED DELLA VECCHIA was in his 
first round of a multiday in- 
terview process for the CIO 
position at Starbucks Corp. 
Suddenly, in popped someone 
who politely asked to join the 
discussion for a moment. The 
visitor was the company’s leg 

endary founder and chairman, Howard 
Schultz. “He shared what was on his 
mind. He wanted to give me a chance to 
meet him,” says Della Vecchia. “He was 


~ 


very impressive.” 

Demand is strong for information 
technology professionals, especially for 
top-level IT executives such as CIOs, 
chief technology officers and executive 
vice presidents. Senior executives need 
to woo these in-demand IT gurus, and 
Schultz understands this. To attract a 
good person, the company’s top dog 
must be involved. Della Vecchia got a 
at the Seattle-based coffee- 
store chain and took it, in part, he says, 
because he felt that the highest levels of 
Starbucks’ management were support- 
ive of him and his position based on 
what Schultz told him. 

The following are seven strategies 

that can help bring in — or keep — a 
top-level IT executive: 
1. Include the C10 in the ‘inner circle.” “One 
thing becoming very important today, 
more so than ever before, is to organiza- 
tionally have the CIO report directly to 
the CEO [ideally], or the president or 
(chief operating officer],” says Beverly 
Lieberman, a principal at executive 
search firm Halbrecht Lieberman Asso- 
ciates Inc. in Stamford, Conn 

“Allow the CIO to share the table 
with the top management of the com- 


job offer 


pany. Treat them as an equal member of 
the executive board,” adds Barbara Go- 
molski, research director at IT work- 
force research firm Gartner Institute in 
Eden Prairie, Minn. 

CIOs want to expand their influence 
beyond IT and make a contribution to 
the company’s bottom line, says Ernie 
Park, vice president and CIO of Global 
Business Services at Honeywell Inter- 
national Inc., an aerospace and automa- 
tion company in Morristown, N.J. CIOs 
must be engaged in developing busi- 
ness strategies, not just IT strategies, he 
notes 

By personally meeting with Della 
Vecchia during his interviews, Schultz 
sent a message that everyone from the 
chairman on down considered the CIO 
a part of the top management at Star- 
bucks 
2. Pay is important. “[A ClO] has to 
have an extraordinarily competitive 
compensation plan,” says Lieberman. 
“It may not conform to the way you're 
paying other executives. They are high- 
er paid than those in other functions 
not because they are intrinsically more 
valuable, but it’s supply and demand.” 

A competitive salary isn’t enough, 
though 

“You don’t get top-level execs with 
just the compensation plan. You need 
an equity plan,” says Charles Foley, ex- 
ecutive vice president and CTO at In- 
range Technologies Corp., a Mount 
Laurel, NJ.-based provider of enter- 
prise infrastructure. This means stock 
options or other equity plans. 


| 3. Pay attention to “soft” issues. “So 


many times, what people are attracted 
to are the intangibles: Is there a crystal 


vision? Is it well articulated? Is it com- 
pelling?” says Wade Myers, CEO of In- 
terelate Inc., a business analytics appli- 
cation service provider in Minneapolis. 

Don't ignore what’s in it for the CIO. 
“We are looking for challenging learn- 
ing opportunities. We have to be able to 
grow,” Park says 

“The soft stuff is really what drives 
retention [of CIOs],” says Della Vec 
chia. “Those who are driven just by 
money aren’t going to be happy and ful- 
filled, no matter what.” 

4. Provide support. The top IT execu- 
tive doesn’t want to go on bended knee 
for money. “Give him enough budget to 
bring in good technology,” says John A. 
Challenger, CEO of Challenger, Gray & 
Christmas Inc., a Chicago-based out- 
placement firm. Challenger says cut- 
ting-edge technology is needed for run- 
ning the business and helping the CIO 
attract top-flight IT talent. 

5. Show commitment from the CEO. 
Time was, many CEOs ignored or were 
even intimidated by technology. If that’s 
still the case in your organization, at- 
tracting and retaining top IT executives 
may be impossible. 

“The CEO has to be willing to invest 
personal time and make a commitment 
to learning more about IT. They can’t 
avoid it or hide or delegate it,” warns 
Lieberman. 


| 6. Provide leading-edge technology. No 


matter how much money and adulation 
a professional athlete gets, the really 
good ones still retain some of the en- 
thusiasm for the game that they had 
when they were learning it as kids. The 
same is true of top IT managers. “Even 
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at a high-officer level, these folks are 
still attracted to the technology. They’re 
still turned on by it,” says Randy Yne- 
gas, human resources director at STech, 
the IT division of Charles Schwab & 
Co. in San Francisco. Terry Gallagher, 
president of Battalia Winston Interna- 
tional, an executive search firm in New 
York, calls the latest technology “a big 
turn-on for CIOs.” The right technolo- 
gy helps attract and retain IT execu- 
tives. These people still like to play 
with cool toys. 
7. Look within. Gomolski recommends 
looking for top talent inside the organi- 
zation. Her reasoning: It’s taking com- 
panies up to four months to fill staff po- 
sitions, and, she says, “It’s not hard to 
imagine [that] it will take a year” to fill 
a CIO spot. Recruiting from within can 
save time. And perhaps even more im- 
portant, Gomolski adds, by promoting 
an employee, you can largely overcome 
the chances of a mismatch between a 
person you bring in from outside and 
your corporate culture. 

Steve Finnerty, senior vice president 


| and CIO at Kraft Foods Inc. in North- 


field, Ill., says of promoting from with- 
in, “The insider knows the company 
{and] has built up relationships.” While 
he acknowledges that an outsider can 
provide a fresh perspective by “staying 
connected to the outside world” through 
trade shows and seminars, Finnerty says 
such a shortcoming can largely be over- 
come. D 


Horowitz is a freelance writer in 
Salt Lake City. Contact him at 
alan@ahorowitz.com. 
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CONSULL 


For independent consul- 
tants like Vanda Collis 
who are on Call every 
day, all the time, the 
biggest challenge each 
week can be determining 
where their professional 
lives end and private lives 
begin. By Leslie Goff 


ANDA COLLIS was sitting in 
the late-night glow of her PC, 
answering e-mail from her 
home office at 1 a.m., when 
the telephone rang. Her first 
thought was that it must be a fax; her 


second was that it was a possible family | 


emergency. But instead, it was a busi- 
ness call — a consultant in Korea who 
wanted to line her up as a U.S. business 
partner for his fledgling Web venture. 
Collis laughed, with relief and then 
surprise. The caller apologized pro- 
fusely for not realizing the late hour 
stateside. And they spent the next hour 


discussing a potential business deal. 

Such was the end of another typically 
long day for Collis, an independent in- 
formation technology project manager 
who, with her husband, R. C. Collins, 
runs Waltham Park Resources Interna- 
tional Inc. from their home in Ridge- 
wood, NJ. 

Since Collis gave up full-time em- 
ployment early last year to join her 
husband as an independent consultant, 

er personal and professional lives 
have merged into a seamless whole, 
with little demarcation between where 
one ends and the other begins. 


“A typical day is a very rigorous day,” 


Collis says. “We are our own support 


team, sales team and business develop- 


ment team, the strategists and the im- 
plementers, the bookkeepers and the 
mail room. We have to project-manage 
our lives.” 

Collis isn’t alone. While those who 
choose the consulting life find that it 
often offers greater financial rewards 
and more interesting technical oppor- 


tunities, they also find that it means be- | 


ing on-the-ready 24 hours a day, seven 
days a week. An average week for Col- 


lis illustrates the round- 
the-clock nature of the job. 

The first thing Collis 
does in the morning is try 
to rouse her three children 
— ages 9,7 and 5 — fora 
sleepy goodbye before she 
heads out the door. She’s 
on her way just after 6 a.m. 
and catches a 6:24 train 
bound for Manhattan, 
where she’s managing a 
financial services firm’s 
Web site redesign at con- 
sultancy iXL Inc. 

By 7:30 or 8 a.m., Collis 
is at her desk in Atlanta- 
based iXL’s New York of- 
fices on West 14th Street. 
For the first hour, she 
works on a client presenta- 
tion or updates the project 
management plan. Then 
she’s on the phone, con- 
firming costs with suppli- 
ers, coordinating with oth- 
er functional groups sup- 
porting her project, touch- 
ing base with engineers 
and the creative depart- 
ment and nailing down 
details with project leaders 

on her team. 
Next up is a review session 
or presentation with the client. 
“T’m on stage for two hours,” she 
says, “taking the client through what 
we’ve done and showing them what 
we'll do next to make the project suc- 
ceed.” 

For the rest of the afternoon, she’s 
working on project definition docu- 
ments, preparing action plans, review- 
ing current processes and assessing 
where best practices can be applied. 
That involves researching best prac- 
tices for the financial services industry 
— much of which Collis does on the 
weekends. 

On a good day, she’s out of the office 
by 6:30 p.m. and home by 8 p.m. to 
read to her kids, ask them how their 
day was and tuck them in for the night. 
After eating a quick dinner and bounc- 
ing some new ideas off her husband, 
she’s in front of her PC. She wraps up 
e-mails, responds to inquiries from 
past clients and potential customers, 
and makes notes for the next day. 

All told, Collis and Collins each put in 
about 50 to 60 billable hours per week. 
On top of that, they commute into New 
York together a couple of times each 
week (though they typically work for 
separate clients) or grab a dinner out so 
they can review upcoming projects or 
brainstorm new ideas for the business 

Weekends are just as full. In be- 
tween soccer games, two Girl Scout 
troop meetings (she’s the troop 
leader for each) and church, Collis 
makes time to do research and con- 
tinue discussing new business devel- 
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opment and strategy with Collins. 

On Sunday nights, when the kids are 
allowed their only weekly television 
time, Collis and Collins go over the 
books, pay the bills and enter their ex- 
penditures into QuickBooks. “That’s 
our wind-down time,” she says 

But Collis says she thrives on the 
challenge of keeping everything togeth- 
er. “I’ve had the option to take a year off 
and just breathe, but I enjoy being busy 
and doing what I’m doing,” she says 

That passion, in fact, is spurring her 
to add more pressure to the mix: She’s 
pursuing a Ph.D. in project manage- 
ment at the Stevens Institute of Tech- 
nology in Hoboken, NJ. 

Although she’s actually working 
more than she was as a full-time em- 
ployee, Collis says she feels like she 
has more options as a consultant. One 
of those options: No matter what else 
is going on, she can drop everything 
to see her kids in a school play or 
other activity. “I’m there for them. 
That’s the only exception I allow myself 
for not working,” Collis says. D 


Goff is a freelance writer in New York 


UP CLOSE & PERSONAL 


Vanda Collis: 
24-Hour Consultan 


Previous IT exp 


ence: Fifteen years in financial se’ 


5 degree in 
ge. 1990 (thesis expl 
s); MBA in MIS, Sta 


st: Working wit 
edesign and development of a financial 
company's Web site. 
itments: Getting to soccer pr. 
of her children (her husband c 
leading two Girl Scout troop meetings 
a Daisy; the other's a Brownie); organiz- 
ng a one-week Vacation Bible School program each sum- 
mer attending weekly classes at the Stevens Institute of 
Technology in pursuit of a Ph.D. in project management 


She couldn't do it without: Her live-in child 


care provider 





NFORMATION technology 
auditors don’t like to think 
of themselves as cops, but 
they do monitor IT proj- 
ects for delays, mistakes, 
undue risks and other 
costly and embarrassing 
problems. 

Often coming from cor- 
porate auditing backgrounds, IT audi- 
tors have to evaluate two areas: project 
progress and political winds. It’s an IT 
auditor who must tell a powerful CIO 
what’s gone wrong under his com- 
mand and then break the bad news to 
senior management 

Even aside from those delicate polit- 
ical issues, the IT auditor's job is get- 
ting harder. That’s because the pace of 
IT deployment has picked up as com- 
panies work to roll out Internet proj- 
ects in Internet time. 

“Being an IT auditor is a thank- 
less job,” says Bruce Webster, a direc- 
tor at PricewaterhouseCoopers in 
Washington. 

If the auditor doesn’t find any prob 
lems, people question his effective- 
ness, Webster says. “If you do find 
problems, the people in charge of the 
project argue against you,” he says. 
“The only way you are proven right is 
if a project fails.” 

rhat’s a lot of guff to take for mid- 
dling salaries. The average staff-level 
IT auditor earns $42,000 to $45,000 
per year, while an IT audit manager 
makes $70,000 to $75,000, according to 
a recent poll of 1,220 members of the 
Information Systems Audit and Con- 


BUSINESS | 


trol Association (ISACA), a trade 
group in Rolling Meadows, III. 

IT auditors generally find more re- 
spect at financial services firms than at 
firms in other industries, notes Mark 
Keil, an associate professor of IS at 
Georgia State University in Atlanta. 

Banks, insurers and other financial 
firms are most receptive to auditing 
because of the exacting nature of their 
business, Keil says. 

To increase the visibility of IT audi- 
tors among corporate management, 
ISACA launched an offshoot group 
called the IT Governance Institute 
(www.itgovernance.org) in May. The 
idea is to encourage the business side 
of the company to work more closely 
with technology managers. That in- 
cludes building a higher profile for IT 


auditors, an ISACA spokeswoman says. 


IT auditing has been a quiet career 
niche, often separate from overall cor- 
porate auditing, she says. “But that has 
to change if businesses — especially 
when they rely so heavily on technol- 
ogy — are to be successful,” she says. 


GAINING TRUST 


Through her own trial and error, 
Shelly Hogan has discovered that it’s 
best for IT auditors to get involved at 
the start of a project and help guide it 
to a successful finish, rather than come 
in after its rollout to assess the dam- 
age. Plus, problems that are spotted 
sooner are typically cheaper to fix. 

That kind of proactive approach 
might sound like common sense, but it 
was initially hard to enact because of 


mistrust between the IT and auditing 
staffs, says Hogan, who until last month 
was an IT auditor at American United 
Life Insurance Co. in Indianapolis. 
“Not being on the best side of IS pro- 
fessionals, they don’t want to give you a 
lot of information about what they’re do- 
ing and how they’re doing it,” she says. 
But Hogan pressed on by regularly 
attending IT planning meetings and 


EELS WY ERTL SO OTE ELD, 


Why IT Auditors 
Stay in Business 


Even at companies chosen by Com- 
puterworld as the Best Places to Work 
in IT, projects slip. IT managers were 
asked what percentage of IT projects 
under their direction are completed 

on time and on budget. 


@ 75% or greater 


B 50% to 75% 


Base: IT managers at 100 companies 
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working to convince technologists that 
she was there to help them succeed. 

An e-commerce project last year was 
a breakthrough, she says. During de- 
velopment, auditors discovered that 
some basic security policies weren't 
being followed. For example, there was 
no time-out to log off users after 10 
minutes of inactivity, she says. 

By catching the deficiencies early, 
auditors saved the team from having to 
go back and correct them at rollout — 
a harried time when no one wants to 
be told to start anything over. Being 
involved up front works best for both 
sides, Hogan says. “It’s more of a part- 
nership, rather than catching them in 
the act of doing something incorrectly.” 

One of the keys to overcoming the 
divide between IT and auditors is to 
educate the IT department about what 
an auditor’s goals are in monitoring 
their work, says Greg Grocholski, one 
of 13 IT auditors at The Dow Chemical 
Co. in Midland, Mich. 

Next, IT auditors must know the 
technology at all costs. IT experts 
don’t want to be audited by people of 
lesser expertise, he says. 

“If you're still viewed as the police, 
then you’ve done a poor job at market- 
ing and informing others in the com- 
pany about your mission,” he says. 

It’s a never-ending process, though. 
In early 1998, after eight years in IT au- 
diting at Dow Chemical, Grocholski en- 
countered IT managers who questioned 
why auditors should be involved in the 
company’s year 2000 remediation proj- 
ect. “They thought of us as technical 
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SHELLY HOGAN, a 
former IT auditor, 
says auditing works 
best when “it’s more; 
of apartnership” | 
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auditors, not business auditors,” Gro- 
cholski says. 

It wasn’t until after he had created and 
distributed a detailed plan for how his 
team would help Dow Chemical’s Y2k 
efforts that the IT group agreed to work 
with the audit department, he says. 

Company culture can also inhibit au- 
ditors from reporting serious dangers. 

“Large IT projects tend to be associ- 
ated with bonuses and promotions that 
people don’t want jeopardized,” says 
Webster. 

He recalls a Fortune 100 financial 
services firm on the East Coast where 


si 
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the IT department used to boast that it 
was never late or over budget because 
it would redefine project parameters 
to meet whatever deadline was set. 
Then it would immediately start a fol- 
low-up project “to get the thing actual- 


ly working,” Webster says. 

Some IT departments try to avoid 
formal audits with self-policing. The 
Earthgrains Co., a food distributor in 
St. Louis, does that, and it teaches IT 
managers to give a firm “no” when too 
many user requests will delay an appli- 
cation development project, says 
Stephen Brazile, Earthgrains’ CIO. 


Polic 





The company has no internal IT au- 
ditors but relies on external monitor- 
ing from its accounting firm, Pricewa- 
terhouseCoopers. “If we don’t finish 
on time, it’s tough. You get a lot of 
questions from executive manage- 
ment,” Brazile says. 

At least 75% of Earthgrains’ IT proj- 
ects are on time and on budget, he says 
(see chart). 

International Truck and Engine 
Corp. in Chicago doesn’t have internal 
auditors, either. Art Data, vice presi- 


dent of IT, tries to keep the success rate 


for IT projects high by keeping them 
small. “The smaller we can keep [IT 
projects], the more chance you have to 
keep them on time and on budget. The 


bigger ones, we don’t do as good a job,” 


Data says. 

Fifty percent to 75% of International 
Truck’s IT projects are completed on 
time and on budget, he says. 

Yet having an IT department monitor 
itself creates a conflict of interest, ex- 


perts agree, because the work isn’t done 


objectively with metrics that are inde- 
pendently verified. As Webster puts it, 
“You don’t ask the software engineer 
‘How much do you think you have left? 
How good a job are you doing?’ ” 


STANDING TOGETHER 


Even if they’re viewed warily, many IT 


auditors feel a kinship with the people 
they watch. They have a lot in common. 
Pressure to do business on the Inter- 
net, for example, has forced IT organi- 
zations — and auditors — to work 
faster and learn about new technol- 
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ogies at a much quicker rate, says Jill 
Joseph, an IT auditor at Blue Cross 
Blue Shield of Louisiana in Baton 
Rouge. Furthermore, Joseph says, on- 
line systems projects introduce many 
new areas for IT auditors to police, 
such as cybercrime and hacking 


“There’s a whole set of different ex- 





posures out there,” she says. “We hz 
that learning curve to overcome, just 


like the IT folks.” DB 


IT Auditing: 
What It Takes 


To be effective, IT auditors shouldn't 
report to IT managers or the ClO. They 
need to be independent of the people 
they're monitoring, says Bruce Webster 
a director at PricewaterhouseCoopers in 
Washington 

Yet experience in IT can be invaluable, 
not only for the technology know-how, but 
also to ensure that auditors start off on the 
right foot with IT people, who may resent 
being watched over, Webster says 

Other must-do items for successful IT 
auditors include the following: 
m Take courses to keep current on new 
technology 
w Get involved in IT projects at the start 
and help create achievable milestones. 
w Publicize the criteria used to judge proj- 
ects so that no one feels blindsided 
a Finesse political trouble by dealing with 
conflict artfully. Classes in negotiating and 
handling disagreements are critical 

-Kim S. Nash 
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MS. 


Bridging a gap for 


women in II 


ILL ROSENTHAL had been tending bar for seven years when she real- 
ized she was going nowhere. Because she had an interest in art, she 
enrolled in a program in new-media skills sponsored by the city of 
San Francisco. “I’ve always been good at math,” she says. “This was a 


chance to use that side as well as my creativity.” 


As the class progressed, 
Rosenthal found she liked pro 
gramming even better. “I liked 
the problem-solving involved 
in writing code,” she says. 

Rosenthal was recruited for 
a job as a production assistant 
at the webzine Salon even be- 
fore she finished the program. 
Today, she’s saving to buy a 
house. 

Lynn Garcia tried social 
work, odd jobs and volunteer- 
ing before learning the skills 
to become a Web designer at 
Upside Today, an online maga- 
zine. 

Both women are graduates 
of JobLink, a program from the 
Bay Area Video Coalition, a 
nonprofit media arts center. 
JobLink attempts to bridge the 
“digital divide,” the chasm cre- 
ated as the rapid growth of the 
technology economy leaves 
many poor and minority com 
munities behind. 

Depending on which side of 


m INTERNET PRIVACY EPERSON- 
ALIZATION 

Hyatt Regency San Francisco, 
Aug. 7-8 

Explore privacy issues. 
COST: $1,599 

CONTACT: International Qual- 
ity & Productivity Center, 
(312) 980-3413; 

e-mail: laplax@psinet 
www.igpc.com/INHP-T W, 
eprivacy&personalization2 


m= CORPORATE PORTALS 
CONFERENCE 

Boston Park Plaza Hotel & 
Towers, Aug. 8-10 

Learn how to construct and 
maintain a corporate portal. 
COST: $1,095 

CONTACT: Digital Consulting 
Institute (DCI) in Andover, 


the divide you're on, you may 
see it as a major civil-rights 
issue of the new century or an 
unacceptable waste of poten- 
tial talent for the already over- 
stressed technology job mar- 
ket, in which 1.3 million new 
jobs will be created by 2006, 
according to the U.S. Depart- 
ment of Labor. 

But any way you look at un- 
deremployment and untapped 
potential in the technical mar- 
ketplace, you're looking at 
women. 

More than half of JobLink’s 
graduates have been women, 
and they’ve moved into ca- 
reers as interactive designers, 
graphic artists, webmasters, 
site designers and HTML and 
Java coders. Many of these po- 
sitions are more attractive to 
women than other technical 
jobs because they use technol- 
ogy as the tool in an endeavor 
that’s basically artistic. Garcia, 
for example, who minored in 


Mass., (978) 470-3880; 
e-mail: netreply@dciexpo.com 
www.dci.com 


w WEB DEFENSE 

Hyatt Regency Bethesda, 
Bethesda, Md., Aug. 8-9 

How to implement and plan 
strategies to fight cybercrime. 
COST: $1,895 to $2,795 
CONTACT: Active Communica- 
tions International in Chicago, 
(312) 780-0700; 

e-mail: jhaines@acius.net 
www.aclius.net 


| m LINUXWORLD CONFERENCE & 
EXPO 

| San Jose Convention Center, 

| Aug. 14-17 

| Learn how to unleash the 

| power of Linux. 


art history in college, says the 
program’s artistic element is 
what hooked her. 

JobLink, which is free, con- 
sists of four months of intense, 
hands-on training: 
45 hours on con 
cepts like Internet 
basics, project 
management, 
design principles 
and Web design; 
132 hours of tech- 
niques including 
digital imaging, 
HTML, text and 
graphics editing, 
digital video and 
audio, software 
tools, such as 
Photoshop, and 
JavaScript; and 103 
hours of career development, 
from field trips to résumé 
writing, interview techniques 
and portfolio presentation. In 
the final phase, participants 
work on digital-video projects 


COST: $795 for three-days 
CONTACT: International Data 


| Group in Framingham, Mass., 
| (800) 657-1474; 


e-mail: linuxworldexpo@ 
idg.com; fax: (508) 370-4325 
www.linuxworldexpo.com 


w NETEXPO WASHINGTON 2000 
The Washington Convention 
Center, Aug. 16-17 

This conference will include 
content providers, Web devel- 
opers, hardware and software 
suppliers, Internet service 
providers and firms offering 
e-commerce solutions. 

COST: Free with preregistra- 
tion by July 31 or $20 at the 
door. 


| CONTACT: NetExpo Washing- 
} ton in McLean, Va., 

| (703) 536-2100; e-mail: info@ 
| netexpowashington.com; 

| fax: (703) 536-2101 


www.newexpo.com 
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KATHLEEN MELYMUKA is a 
Computerworld feature 
writer. Contact her at 
kathleen_melymuka® 
computerworld.com. 


for area nonprofit organiza- 
tions. 

Participants say the training 
is rigorous. “It’s one of the 
more challenging and difficult 
things I’ve had to do,” Garcia 
says. “But the rewards are im- 
mense.” 

For example, a 39-year-old 
African-American woman 
who made less than $16,000 
per year before JobLink is now 
a Web producer pulling down 
$38,000. A 27-year-old Latina 
who made $5,000 is now a 
Web developer making more 
than 10 times that. Some par- 


ticipants report that they’re 


even being recruited by other 
potential employers. 

So far, JobLink has trained 
more than 220 people. Its 
placement rate 
has reached into 
the high end of 
the 90th per- 
centile this year. 
Graduates are 
working for more 
than 30 employ- 
ers, ranging from 
the San Francisco 
Museum of Mod- 
ern Art and 
Charles Schwab & 
Co. to Big Zig and 
Planet Out Corp. 
JobLink succeeds 
where other pro- 
grams fail because it targets 
the right people — over 25, 
low-income, English-speaking 
high-school graduates. It tar- 
gets the right industry: new 
media. The culture is casual 


= SCO FORUM 99 

University of California at 
Santa Cruz, Aug. 20-25 
Provides the latest in e-com- 
merce solutions. 

COST: $995 for partners; $1,395 
for general admission 


| CONTACT: The Santa Cruz Op- 


eration Inc., (800) 726-8649 


| Www.sco.com 


| m SECOND ANNUAL NETWORK 
| SECURITY CONFERENCE 


Flamingo Hilton Las Vegas, 
Aug. 20-23 

Provides information on how 
to secure your systems. 
COST: $795 for ISACA mem- 
bers; $945 for nonmembers 


CONTACT: Information Sys- 


| tems Audit and Control 
| Association (ISACA) in 


Rolling Meadows, III; 

e-mail: conference@isaca.org; 
fax: (847) 253-1443 
www.isaca.org/nsc2000.htm 
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and favors productivity over 
credentials, it offers quick ad- 
vancement based on results 
and freelance opportunities 
provide flexible working con- 
ditions for single parents and 


| others who can’t work full 


time. The program stresses 
real-world, project-based 
training. It has built relation- 
ships with employer compa- 
nies, enabling JobLink to place 
graduates and to adapt based 
on client feedback, and it 
works with local community 


| organizations for support ser- 


vices such as day care. 

This year, JobLink won the 
best practices award from the 
U.S. Department of Housing 
and Urban Development. 

But more important, the pro- 


| gram wins accolades from the 


women who have gone 
through the program. “I would 
recommend it to anyone,” 
Rosenthal says. “It was the 
most intense, yet enjoyable, 
learning experience of my life.” 


A Change for Ms. MIS 


We're confident that women 
in IT would agree that change 
is good. With that in mind, 
women’s issues will share 
this space with the concerns 
of others who are under- 
represented, underheard and 
underserved in IT. Hoping to 
advocate for a more diverse 
IT community, the new col- 
umn, “DiversITy,” will pre- 
miere Sept. ll. We hope to 
hear from all of you. B 


= MIDDLEWARE: 
DEVELOPING AND INTEGRATING 


| E-COMMERCE BUSINESS 


APPLICATIONS 


| Hilton Toronto Airport, Aug. 
| 22-25 


Provides education on middle- 


| ware and how a business can 


use it to integrate different 
applications. 

COST: $1,695 

CONTACT: DCI, (800) 767-2755 


www.dci.com/events/ 


| middleware 


w HELP TECHNOLOGY 


| CONFERENCE 


World Trade Center and Sea- 
port Hotel, Boston, Aug. 23-26 
Provides the latest informa- 
tion in online help design and 
development. 

COST: $995 

CONTACT: WinWriters in Seat- 
tle, (800) 448-4230 
www.winwriters.com/htc.htm 
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FINANCIAL & BUSINESS CONCEPTS IN BRIEF 


Structured Financing 


DEFINITION 
Structured financing offers an op- 
portunity for a company to bor- 
row money based on the value of 
a specific project or asset, rather 
than on its own credit rating. For 
example, a company building a 
factory can borrow money based 
on the worth of that factory or 
on projections of future revenue 
from that factory. 


BY MARIA TROMBLY 


66 


OE” WANTS 
buy the equip- 
ment needed to 
become an Inter- 
net 
vider. He has cus- 


ro 


service 


pro- | 


tomers signed up and knows | 


he’ll have a predictable rev- 


enue stream. But Joe has no | 
credit history and no track | 


record. 


| to 


In the event that he can’t get | 
a business loan or venture cap- | 


ital, there’s another financing 


option that could work for Joe: | 
structured financing, which is | 


a way of borrowing money 
against an asset or a projected 


asset without consideration of | 


the creditworthiness of the 
borrower. 


“If you 


| pense 


had a fairly stable | there’s also an almost guaran- | 


stream of revenues coming in | 


once you 
structure, 
candidate 


that’s a very likely 


for structured 


built out the infra- | 


fi- | 


nancing,” says Todd Eyler, an | 
analyst at Cambridge, Mass.- | 


based Forrester Research Inc. 


For example, a good candi- | 
date for structured financing, | 
he says, is a company or gov- | 
ernment agency that’s building | 


a bridge — an asset with a last- 


ing and fixed value. If anything | 


happened to the borrower, the 
bridge would still be there. 
This kind of financing is ide- 
al for a start-up company that 
needs a lot of capital to get go- 
ing but doesn’t have a good 
credit history, Eyler says. 
Structured financing isn’t in- 


tended for small-scale proj- 
ects: The average of a 
structured financing deal is $25 
million, and it can top $300 
million or more, according to 
Kevin Walsh, managing direc- 
tor of the Structured Finance 
Group at General Electric Cap- 
ital Corp. in Stamford, Conn. 
“If I have to buy equipment 
or machinery, an efficient way 
finance that 
through structured finance,” 


size 


Eyler says. An existing com- | 
pany would be more likely to | 


use structured financing to 


smooth out its cash flow, he | 


adds. 

For example, a movie studio 
that hires Mel Gibson to star in 
a film has a huge up-front ex- 
namely, his salary. But 


would be | 


teed revenue stream from the- 


ater tickets, foreign distribu- | 


tion, video sales and television 
rights. 

Eyler warns that most tech- 
nology investments don’t read- 
ily lend themselves to struc- 


| tured financing because they 
tend to depreciate too quickly. 


Plus, the revenue stream for 


many information technology 
e-com- | 
| merce, is too uncertain, he says. 
“Purely lending against IT | 
infrastructure itself — that’s a | 
recipe for disaster,” Eyler says. | 


projects, including 


“If I were a bank, I wouldn’t fo- 


| cus a lot of my balance sheet 
| on that.” 


| Like Rent-to-Own 


Ironically, one of the very 
first instances of asset-backed 
borrowing was when Sperry 
Rand Corp., now part of Blue 
Bell, Pa.-based Unisys Corp., 
used structured financing for 
its computer equipment in the 
mid-1980s, according to David 
Warren, an analyst at New 
York-based Morgan Stanley 
Dean Witter & Co. 

Equipment leasing is a form 
of structured financing that’s 
similar to the “rent-to-own” fi- 
nancing model used by some 
furniture In this in- 
stance, the finance firm buys 
the equipment and leases it to 
the company that needs it. 

GE’s Structured 
Group does a lot of this, ac- 
cording to Walsh. 

“We are the tax and legal 


stores. 


Finance | 


owners, and the ownership 
would revert back to [the user 
of the facility] at the end of the 
lease agreement,” Walsh says. 

Why would a 
adopt this type of structured fi- 
nancing? One reason is the tax 
advantages, Walsh says. 

For example, if a company 
has an asset that represents a 
tax credit, the credit is unreal- 
ized if the company is losing 
money. By transferring the as- 
set to a firm that can take ad- 
vantage of the credit, everyone 
comes out ahead — except that 
Uncle Sam has to give the 
credit earlier than otherwise 
might have been true. 

Another 
equipment instead of owning it 
outright is to make the compa- 
ny look more attractive to Wall 
Street. Although equipment 
facility leases must be 
mentioned on corporate finan- 
cial statements — usually in 
they wouldn't 
show up in things like leverage 
ratios, which is the amount of 
debt vs. equity, according to 
Eyler. 

“The bottom line is that 
companies are trying to opti- 
mize their capital structure,” 
Walsh says. “Depending on 
where it is in its growth curve, 
[the company] may need more 
equity or more debt.” 

Another type of structured 
financing involves equity, or 
partial ownership of a company. 

For example, Walsh says, his 
group would lean toward tak- 


company 


reason to lease 


and 


footnotes 


Financing Firm Launches Online ‘Deal Room’ 


General Electric Capital’s 
Structured Finance Group han- 
dles complex financing deals that 
can take up to six months to 
process. 

But there might be a way to cut 
that time by 10% to 20%, says 
Kevin Walsh, the group’s managing 
director of e-business. 

Two months ago, the company 


launched an “e-deal” room, which is 


currently being used to manage 35 
“We think this is a terrific way to 
transform a complex and cumber- 


some deal-making process,” Walsh 


says. According to Walsh, 10 to 12 
people are usually involved in a deal. 
A telecommunications equipment 
build-out, for example, can take 
months of assessment, evaluation, 
contract development, lease struc- 
turing and pricing. Once a deal is 
struck, large amounts of data con- 
tinue to move between the customer 
and the financing group. 

The Structured Finance Group 
Web site (www.ge.com/capital/sfg) 
also hosts tools, such as an oil and 
gas reserve calculator that can be 
used to estimate the worth of an oil 


or gas property. 


Currently, the project collabora- 


? tion tools are provided by an outside 
: vendor. However, Walsh says his 

? group is in the process of building its 
? own tools, which are expected to be 
: online by the fourth quarter. 


About one month ago, one of GE 


? tomers began piloting an automated 
? reporting package that's expected 
? to remove 10% to 20% of the costs 
? of monitoring and complying with 
? tomers are expected to join in the 
i next few weeks. 


~- Maria Trombly 


+ 


ing an equity investment in a 
telecommunications company 
that wants to expand. Why? 
Because a company may want 
to have less debt and more eq- 
uity and because GE Capital 
likes to invest in growing com- 
panies. “We want to grow with 
the company as it grows,” 
Walsh says. 

Say that a telecommunica- 
tions company secures a li- 
cense for a new region and 
needs to build its infrastruc- 
ture, he says 

Usually, Walsh will deal with 
a company’s CEO and chief fi- 
nancial officer, and a chief 
technology officer is integrally 
involved as well, he says. 

“We have staff a 
whole cadre of engineers and 
so forth that help us assess 
projects like that and help us 
assess the risks and the valua- 
tions,” he says. “They would be 


on our 


| talking directly to the CTO to 


discuss these issues.” D 
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€Europe: Will Europe Leapfre 
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11-13 September 2000, Grimaldi Forum, Monaco 


You are invited to attend The European IT Forum 2000, eEurope: Will 
Europe Leapfrog the US in eBusiness? |DC’s special 10th anniversary 
Forum will give you a real insight into how European industry can take 
advantage of the eBusiness revolution and recover its leading role in 
the worldwide economy 

To register your place on The European IT Forum 2000, visit our web 


site: http://emea.idc.com/forum/forum2000, or complete and return 
the attached coupon. Spaces are limited so please book early 


Key speakers include: 


Douglas F. Aldrich, Vice President and Managing Director Global E- 
Services Practice, A.T. Kearney 


Ola Ahivarsson, Founder and CEO, Result Venture Knowledge 
International 


Steve Balimer, President and CEO, Microsoft Corporation 

Alex Berger, Chairman and CEO, CANAL NUMEDIA 

Laurence Blackall, Senior Vice President, President of Concentric 
Europe 

Peter Blackmore, Senior Vice President, Sales and Marketing 
Compaq Computer Corporation 


Gary Bloom, Executive Vice President, Oracle Corporation 
Alan Cane, Chief Technology Correspondent, Financial Times 
Rodolfo Carpintier, President, CommerceNet Espanol and Vice 
President, Netjuice 

Jesus Cid Calzada, General Manager, Terra Networks 

Art Cooke, President, SAS Institute EMEA 


Michael Dell, Chairman of the Board and CEO, Dell Computer 
Corporation 


Michael Earl, Professor of information Management, London Business 
School 


Dr. Friedrich Froeschl, President and CEO, Siemens Business Services 
John Gantz, Senior Vice President, Chief Research Officer, IDC 

Peter George, President, Nortel Networks EMEA Enterprise Solutions 
David Girard, COO, J.D. Edwards and Company 

Mina Gouran, Managing Vice President, Korn/Ferry International 
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Gary Hamel, Professor, Harvard Business School 


Van B. Honeycutt, Chairman, President and CEO, Computer Sciences 
Corporation 


Michael Jackson, Managing Partner, Elderstreet Investments Ltd and 
Chairman, Sage 


Peter Johnston, Head of Unit C1, New Methods of Working, 
Directorate C, European Commission 


Dr. Erwin Koenigs, Chairman and CEO, Software AG 
Bruno Lamborghini, Chairman, EITO 
Marco Landi, CEO, Navlink Inc. 


Erkki Liikanen, Member of the Commission of the European Union, 
responsible for Enterprise and the Information Society 


Patrick McGovern, Founder and Chairman, IDG 

Robert Madge, CEO, Madge.web 

Roberto Masiero, President, IDC EMEA 

John Meyer, President EMEA, EDS 

Stephen Muchetti, President and Chief Operating Officer, Scient 
Professor Nicholas Negroponte, Founder and Director MIT’s Media Lab 
Stewart Nelson, Chief Operating Officer, Novell Inc. 

Prof. ir. Roel Pieper, Partner, Insight Capital Partners Europe 
Elserino Piol, Partner, Pino Ventures and Partners 

Jeremy Rifkin, President, Foundation on Economic Trends 
Peter Rowell, Managing Director, Regent Associates 


Stephan Schambach, Founder, President and CEO, INTERSHOP 
Communications 


Jennifer Schenker, Chief Technology Correspondent, Time Magazine 
Jan Steenkamp, CEO, Open TV 

Alexander Straub, Founder and Vice Chairman, Mondus.com 

Robert Thys, Director of Marketing, EURO.NM 

Cees G. van Luijk, President and CEO, Getronics 

Prof. Dr. Norbert Walter, Chief Economist, Deutsche Bank Group 


Gigi Wang, Senior Vice President, Communications and Internet 
Research, IDC 
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BUSINES 


Dear Career Adviser: 


I’m arisk and credit analyst at a Fortune 500 company. 
I was recently given the opportunity to devote approxi- 

mately 30% of my time to developing our business unit’s 
e-business strategy and initiatives. I love working on 


e-business issues and want to 
do it full time. I’ve got a good 
business background, but I feel 
like I need to develop my tech- 
nical skills. How should I go 
about this? What skills should 
I be focusing on? What’s the 
best format for developing 
them? — E-Business INITIATIVE 


Dear E-Biz: 


You don’t necessarily have 
to become a hands-on techie, 
but you must become tech- 
savvy enough to ask the right 
questions. 

Can you look at various 
technology choices and plat- 
forms, such as Webridge vs. 
Commerce One, and under- 
stand the implications, re- 
wards and risks of each, as 
well as why one system is 
selected and another isn’t? 
That’s the level of learning 
“granularity” you'll need. 

So while you won't need 
to learn to program in Java, 
New York-based recruiter 
John Bongiorno advises that 
you dig deep into e-com- 


Agillion Teams Up 
With Office Depot 


Office Depot Inc. in Delray Beach, 
Fla., and Agillion Inc. in Austin, 
Texas, announced that they will 
jointly market their online products 
and services for small businesses. 
Agillion will offer its management 
services through Office Depot’s Web 
site and catalog. Agillion’s technolo- 
gy lets small businesses create Web 
pages that can be personalized for 
each of their customers. 


Yahoo Posts Gains 


Yahoo Inc. last week posted 
stronger-than-expected financial 


merce software, tools and 
implementations. “Learn to 
understand the different ver- 
sions of software and the dif- 
ferent tools available so you 
can see not just the differ- 
ences between a product up- 
grade — e.g., Oracle7 vs. Or- 
acle8 — but the actual differ- 
ences in the product itself,” 
says Bongiorno, CEO of 
Myrecruiter.com. 

Given this input, your 
best career choices are ei- 
ther in business develop- 
ment, where you'll be devel- 
oping your employer’s elec- 
tronic-business strategy, or 
in product management, 
where you'll be organizing 
a project, making sure devel- 
opment goals are met and 
acting as an intermediary 
between the technical and 
business staff. 

For either route, start by 
working at a company that 
can provide you with a good 
mentor to upgrade your 
technical skills, where you'll 
start by learning the right 
questions to ask. Learn to 


results for its second fiscal quarter, 
as well as a sharp increase in traffic 


| to its Internet sites. Excluding ac- 


quisition-related charges and other 
unusual iterns, second-quarter net 
income was $73.9 million, or 12 
cents per share, compared with 
$27.1 million or 5 cents per share 
one year ago, the Santa Clara, 
Calif.-based company said. Analysts 
had expected the company to report 
a profit of 10 cents per share, ac- 
cording to First Call/Thomson Fi- 
nancial in Boston. Reported revenue 
for the second quarter, which ended 
June 30, was $270.1 million, an in- 
crease of 110% from $128.6 million 
one year ago. 


IBM Buys Aragon 


IBM announced last week that it 


| has acquired Aragon Consulting 
Group, a market research and strat- 


understand what the tech- 
nology means relative to the 
business goals you're trying 
to support at a deep, specific 
level. 


Dear Career Adviser: 

Everything you write about 
emphasizes Java and Oracle 
rather than Microsoft Active 
Server Pages, SOL Server and 
Windows NT for future career 
growth. Do you think Micro- 
soft-related technologies are 
becoming less important, par- 
ticularly for Internet-related 


developer careers? 


Dear Softie: 


Not at all 
on whether your choice is 


It all depends 


to join the developer commu 
nity using Windows, SQI 
Server or Visual Studio. The 
latter certainly offers well- 
respected technology for 
e-commerce applications and 
is used for Web initiatives at 
companies such as Ask Jeeves, 


egy firm in St. Louis. IBM said the 
acquisition will help it provide the 
entire spectrum of electronic-busi- 
ness services, from Internet strate- 
gy and marketing services to back- 
end integration. Financial terms of 
the acquisition weren't disclosed. 
Aragon’s specialty areas include re- 
search, market segmentation, new 
product development and brand po- 
sitioning. The company’s U.S. cus- 
tomers include the Chicago Tribune 
and Bank of America Corp. 


Pinkerton Names VPs 


Pinkerton Computer Consultants 
Inc. in Trevose, Pa., announced the 
appointment of Bob Burton as vice 
president and general manager of 
its southeast region. Burton comes 
from CACI International Inc. in 
Arlington, Va., where he was vice 
president in charge of logistics and 


Stamps.com, Buy.com, Barnes 
andnoble.com, Dell Computer, 
J. C. Penney, Ticketmaster 
and many others. 

If you choose the Microsoft 
path, take the advice of Barry 
Goffe, group man- 
ager for Windows 
Distributed Inter- 
net Applications 
Architecture at 
Microsoft. 

“Most high-end 
e-commerce ap- 
plications are 
built with Visual 
Studio, using a 
combination of 
Visual Basic and 
Visual C++,” says 
Goffe. “Visual Ba- 
sic allows people 
to rapidly build 
complex business compo- 
nents and Visual C++ allows 
people to build the highest- 
performance business com- 
ponents possible. 

“Moreover, Microsoft re- 
cently introduced yet another 
development language known 
as C#,” he adds. “It offers bet- 
ter productivity for C and 
C++ developers and is a lan 
guage optimized for Internet 
application.” 


More About DBA Opportunities 


In my June 5 column, a 
Sybase database administra- 
tor asked about opportuni- 
ties as an Oracle database 
administrator (DBA). Reader 
Krishnamuirthy Iyer wrote 


corporate business development. 
Pinkerton also announced the pro- 
motion of Joseph Chrisinger to vice 
president and group manager. 
Chrisinger was serving as project 
manager of information technology 
services for the Federal Deposit In- 
surance Co. at Pinkerton before his 
promotion. 


ADP Adopts Polite 
Messaging System 


Roseland, N.J.-based Automatic 
Data Processing Inc., which pro- 
vides systems and communications 
networks for 18,000 auto dealer- 
ships in the U.S. and Canada, has 
selected San Jose-based BackWeb 
Technologies Inc.’s Polite software 
to keep its members informed of 
products, pricing, promotions and 
training programs. The Polite soft- 


FRAN QUITTEL is an expert | 
in high-tech careers and } 
recruitment. Send | 
questions to her at 
www.computerworid.com/ | 
career_adviser. i 
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in to offer an alternative ca 
reer path. 

“I would suggest instead 
that the professional move to 
[Microsoft] SQL Server DBA, 
which is in great demand 
currently,” Iyer 
says. “Many cor- 
porations are 
choosing this 
database for low- 
er-volume data- 
base usage and for 
Web applications 
using [Active 
Server Pages] 
Moving into MS 
SQL Server will 
be a breeze, as es- 
sentially both the 
products have 
evolved from the 
same engine. This 
is similar to another current 
trend of C++ 
moving to Java.” 


programmers 


While ease of transfer is a 
great boon, Stormtech Search 
LLC’s Kerry Morris, a re- 
cruiter based in San Fran- 
cisco, says there are a few 
things you should be aware 
of before making this move 

‘I probably get about 10 
times the number of job 
openings for companies 
needing Oracle DBAs, but 
there are not as many candi- 
dates for MS SQL jobs,” 
Morris. “As MS SQL DBAs 
ire harder to come by, com- 
panies using MS SQL are 
willing to pay for them, but 


says 


there are more e-commerce 


jobs using Oracle.” D 


ware provides Internet-based appli- 
cations and proactive portals that 
allow users to send information 
whenever network bandwidth is 
available, without disrupting other 
network activities. 


Excite Helps 
Set Up Shop 


At Home Corp. in Redwood City, 
Calif., is offering a service called 
Freetailer that lets anyone with an 
Internet connection create a busi- 
ness Web site. Once users sign on at 
www. freetailer.com, all services are 
free for the first 100 business trans- 
actions. After that, users are asked to 
upgrade their sites and begin paying 
monthly fees. There is no time limit 
on the first 100 transactions, so users 
can return to their online businesses 
after a lapse without charge. 





Meet Your Future Backup — ADIC’s New Scalar 100 


\ new standard in scalable tape libraries from ADIC, 
the Scalar” 100 has all the features you want in a backup 


solution now and in the future. 


Unmatched Scalability. ADIC's Scalar 100 starts out as a 
one- or two-drive, 30-cartridge DLT tape library, comparably 
priced to smaller Compaq and HP units. Then it scales easily 
and cost effectiy ely up to 6 drives and 60 cartridges to meet 
new storage demands and protect your investment. 

Easy, Plug-in Connectivity. Simple plug-in modules let 


the Scalar 100 adapt to your changing storage needs 


SCSI, SAN, or NAS. 


For more information, visit www.adic.com. Or call 1-800-336-1233. 


More Storage in Less Space. With 50% more storage 
capacity than comparably sized products, the Scalar 100 
packs 4.8 TB* of storage capacity into only 14 rack units, 


saving valuable space for future growth. 


Drive-independent Design. Backup with DLT today, 


and with AIT, LTO Ultrium, and SDLT models tomorrow. 


Unfailing Protection. Enjoy the highest level of service 
and support, including a full year of free on-site 
service from ADIC, the leader in open systems data 


storage solutions. 


adic 
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BETTER FLIGHT 


TRACKING 


The FAA plans to adapt 
an air-traffic control 
system from either Aus- 
tralia or New Zealand to 
control all U.S. oceanic 
airspace. If it works, the 
system could save air- 
lines millions of dollars 
through reduced flight 
times and more efficient 
routes. » 58 


NAPSTER GAFFE 


Last week’s Hack of the 
Month on security vul- 
nerabilities in Napster 
missed some important 
points, but the music 
trading program can still 
pose a security threat. 
Deborah Radcliff makes 
the mea culpas and clar- 
ifications. » 58 


NOT ALARMING 


When is too much infor- 
mation a bad thing? 
When you get so many 
alarms from monitoring 
tools that it’s hard to 
bring business-critical 
applications online. 
Concord Communica- 
tions has released a tool 
it claims combines net- 
work, systems and appli- 
cation monitoring in 
prioritized reports. » 60 


TRUST NOBODY 


Your application service 
provider or Web host 
will take care of chores 
like backing up files, 
right? Wrong, say some 
customers and analysts. 
If your data or your site 
is important, have a 
backup ready. » 61 


EXEC TECH 


Some simple yet amaz- 
ing technology is has- 


EMERGING 








NOLOGY 


tening the time when 
electronic whiteboards 
will be embedded in of- 
fice equipment and the 
scribbles we produce 
with them will be 
shared routinely over 
the Internet. » 62 


QUICKSTUDY 


Programming languages | 
are the sets of keywords | 
and systems of rules for | 
constructing statements | 
that humans can use to | 
communicate instruc- 

tions to a computer. » 64 


FUTURE WATCH 


A battle for the market 
in delivering new types 
of paid content is loom- 
ing. In one corner: PCs, 
WebTV, inexpensive 
Web-surfing appliances 
and companies trying to 
decide how and when 
television and the Inter- 
net will converge. In the 
other corner: Sony, and 
a machine ostensibly 
built to play games. » 66 
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im 6° BRIAN DURKIN, dir&ctor of systems engineering 
at HarvardNet: “We'll continue to augment 


(Ra SS CIN OES EE ID 
FARLY WARNING |: ey, our homegrown tools while we evaluate 


other storage solutions” 
Boeing’s research unit 


===" LOMEGROWN 
STORAGE TOOLS 


sneak up on” the com- 
pany and to develop 
technology such as 
computers that predict 
MANY IT PROFESSIONALS who manage high-end storage are 
looking for turnkey management tools but aren’t find- 
ing exactly what they need. Their answer to the prob- 
lem is to develop tools of their own to ride herd on im- 


how a part will feel be- 
portant functions such as load balancing, Q 


COMPANIES 


Start-up Rainfinity’s 
software aggregates 
firewall, Web and other 
Internet servers into a 
single cluster for im- 
proved performance 
and reliability. It’s a 
more efficient solution 
than throwing hardware 
at the problem. Will IT 
managers bite? » 73 


fore it’s built. » 70 
capacity optimization, storage quota 
management and server availability. 





98 


~ TECHNOLOGY = 


AA Looks Abroad for 
Air-Iraffic Control Systems 


Agency may replace outdated U.S. system 
with technology from down under 


BY BOB BREWIN 
AND MICHAEL MEEHAN 
HE FEDERAL Avia- 
tion Administra- 
tion (FAA) has be 
gun its on-site 
evaluation of tech- 
nology from down under that 
it hopes will lift U.S. pilots into 
the 21st century. 
The FAA currently 
technology developed in the 


uses 
era of propeller-powered Pan 
Am Clippers to 
Atlantic 
Air-traffic 
plot the movement of planes 


guide 
and Pacific 
controllers 


across the 


oceans. 


on paper, relying on position 
reports sent in by pilots over 
noisy and unreliable high-fre- 
quency voice radio systems. 
But once suitably equipped 
aircraft reach 
New Zealand- 
airspace, air-traffic 
countries 


trans-Pacific 
Australia- or 
controlled 
controllers in those 
easily track inbound fights on 
“pseudo radar” 


large screens. 


DEBORA 


jets | 


RAD( 


Those screens display moving 
aircraft icons positioned with 
information 
derived from onboard Global 
Positioning (GPS) 
sent to traffic 


precise location 
Systems 
advanced air 


LIFF/HACK OF 


control (ATC) systems operat- 
ed by Airservices Australia in 
Canberra or Airways New 
Zealand in Auckland 

The FAA, which has strug- 
gled since the mid-1990s to up- 
grade its air-traffic 
control systems, has decided to 
adapt either the Australian or 
New Zealand system to suit its 
needs. Earlier this month, an 


oceanic 


THE FAA may use 
Australia’s air-traffic 
control system to 
manage U.S.-controlled 
oceanic airspace 


THE MONTH 


Napster gaffes 


S SOON AS last week’s Hack of the Month column appeared 
(Technology, July 10], in came a flood of e-mail claiming I had 
overstated the threat and was just plain wrong on some important 


points. Well, I was wrong on some points 


incorrect information about 
others. But I stand by my 
central point that Napster 
Inc.’s software poses some 
important threats for corpo- 
rate users 

Last week, I reported that 
“Sinister Geek” 
Napster client into sending 
non-MP3 files when the 


could trick a 


hacker also used a wrapping 
tool called Wrapster. Bruce 
Hubbert, director of West 
Coast operations at IFSec 
Inc., a security consulting 
group in New York, told me 


he had done exactly that. 
Outside sources verified 
that, because Napster pro- 
vides no authentication or 
encryption when download- 
ing files, there is a threat. 
However, I did make some 
mistakes. The first is how 
the attacker would exploit 
the Napster client. One 
reader said Napster can up- 
load MP3 files only from di- 
rectories selected by the 
Napster users. He’s right — 
unless a hacker uses a buffer 
overflow (confusing com- 


and had been given 


mand buffers with unaccept- 
ably high numbers the client 
PC can’t understand) to 
trick Napster into displaying 
file directories it shouldn’t, 
Hubbert says. 

The second error is that, 
contrary to what I wrote, 
Wrapster can’t be executed 
remotely by an attacker. 
Wrapster must already be 
installed on the hard drive 
of the user, by the user. 

Hubbert acknowledges 


| that it would take the instal- 
| lation of a Trojan horse such 


FAA team began its technical 
evaluations. 

Arinc Inc. in Annapolis, Md., 
has teamed with Airservices 
Australia to adapt that coun- 
try’s system for use in FAA 
oceanic ATC centers in Oak- 
land, Calif, and Anchorage, 
Alaska, for Pacific flights and 
in New York for Atlantic 
flights. Arinc and Lockheed 
Martin Corp. in Bethesda, Md., 
in partnership with Airways 
New Zealand, will submit bids 
to the FAA in November. A 
contract is expected to be 
awarded by year’s end, with in- 
stallation planned for Oakland 
by the end of next year. 


Potential Savings 


The airline industry has 
been impatiently waiting to 


capitalize on the capabilities of 


cockpit-based Future Air Navi- 
gation Systems (FANS), which 
consist of flight management 
computers, GPS receivers and 
satellite communication 
Airlines can save “signif- 
icant sums of money” by flying 
FANS routes, said a flight oper- 
ations manager at a large U.S.- 


sys- 
tems. 


as Black Orifice to get 
Wrapster to do a hacker’s 
bidding. 

And as one reader said, 
once you get a Trojan horse 
in the victim’s ma- 
chine, why not just 
find an easier way 
to ship data out, 
such as exploiting 
Outlook? This is 
the part of the 
supposed threat 
Hubbert acknowl- 
edges is theory: “I 
did not actually 
manipulate Wrap- 
ster to ship data 
off the test ma- 
chine. But I did 
buffer-overflow 
Napster to show me file di- 
rectories it shouldn’t have.” 

A final error suggested 
that Napster automatically 
logs the speed at which the 
client PC is linked to the 


DEBORAH RADCLIFF is 2 
Computerworld staff 
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in security. She can 
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based cargo carrier, because 
the systems provide greater 
flexibility in choosing routes, 
thus cutting down flight time. 
This manager, who spoke 
anonymously, said his compa- 
ny could save $20 million to 
$24 million a year in fuel and 
crew time if FANS could shave 
45 seconds off the flight times 
for the 12 to 14 Pacific trips the 
cargo carrier runs per day. 
Controllers and the flying 
public will benefit too, said Bill 
Blackmer, director of safety 
and technology at the Wash- 
ington-based National Air 
Traffic Controllers Associa- 
tion. “We still have controllers 
working aircraft with little 
pieces of paper. ... [Oceanic] 


| position reports are not dis- 


played, which means con- 
trollers have to [visualize] it all 
in their brains,” Blackmer said. 
Australia and 
Airways New Zealand — the 
counterparts of the FAA in 
those countries — use a tech- 
nique called Automatic De- 
pendent Surveillance to track 
and display flights, according 
to Bob Peake, project manager 
for Airservices’ Australian Ad- 
vanced Air Traffic System. 

He said the information in 
the visual display makes it far 
easier for a controller to pro- 
vide flexible flight routings — 
which is key to helping aircraft 
avoid head winds and ride 
powerful tailwinds. D 


Airservices 


Web. In fact, whoever down- 
loads Napster has control 
over the connection speed 
recorded at the Napster site. 

Hubbert and other securi- 
ty professionals 
say Napster is still 
a security threat. 
He also denies 
having any hidden 
agenda against 
Napster. 

“You can trans- 
fer files with a 
Napster client,” 
says Hubbert. 
“There’s no au- 
thentication. No 
encryption. And 
the code isn’t 
open source, so 
you can’t really be sure what 
it does. I already proved it’s 


| vulnerable to buffer over- 
| flows, which is a very com- 
; mon problem in most client 


software.” D 
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Live Health Tool Aims to Str 


and show information technology man- | 


BY SAMI LAIS 

Concord Communications Inc.’s Live 
Health reporting tool, released last 
month, will filter extraneous alarms 


TECHNOLOGY = 


agers current network, systems and ap- 
plication monitoring data in a historical 
context, said a company spokesman. 


Just a reminder the 
next time you're considering a 
Web procurement solution. 


“The Microsoft 
Elec gii merle 
en CC me) ac) 
closest competitors, 
IBM and Oracle, in 
Web eT 
Tea Cme eC ia 


ea Ee ML tie Mise ee aoe le me ae el 


Where do you want to go today?’ 
De ee] 


ay ee aaa ey ee are eee pe re en ot an ern ene en ee ee ee ke 


monitoring and re- 
| porting 


| agement tool from 


amline Management 


Live Health combines real-time and 


historical data, filters it to reflect the | 


performance of all the applications and 


business processes and then 
*s reports for managers who 


specific 
produ 


| monitor all three IT areas, said Kevin 


Conklin, marketing vice president at 

the Marlboro, Mass.-based company. 
“Live Health [runs on] Solaris and 

does what we were looking for — statis- 


| other IT systems needed to perform | 


tical analysis of network traffic,” said | 
Todd Whipple, an internetworking spe- | 


cialist at Canada’s Department of For- 
eign Affairs and In- 

ternational Trade in 

Ottawa. 

Live Health 
combination of Con- 
cord’s own Net- 
work Health report- 
ing tool, its recently 
acquired real-time 


is a 


tool from 
First Sense Software 
Inc. and its recently 
acquired system and 
application man- 


does wh 


Empire Technolo- 
gies Inc. 

Such merging of 
management data 
reflects a long over- 
due trend, accord- 
ing to Dennis Drog- 
seth, an analyst at Enterprise Manage- 
ment Associates Inc. in Boulder, Colo. 

Going further and filtering out extra- 
neous data should help managers, said 
Paul Bugala, an analyst at International 


| Data Corp. in Framingham, Mass. “It’s 


hard to staff a network operations cen- 
ter,” he said, “so anything you can do to 
simplify things is good.” 

The trade-off, Bugala said, is that 


“with Concord, you’re not going to get 


help desk and the other functionality 
you get with a mature product like 
Tivoli Management Enterprise.” 

But Live Health’s filtering capability 
may be the software’s most useful fea- 
ture, said Joe Banks, a senior network 


Live Health 


How the data flows: 


= EHealth SNMP agents collect real-time 
performance data and feed it to Live Health 


® Live Health calculates the amount of time a 
threshold has been exceeded and what its 
deviation from normal is before generating an 
alarm. 

down data, is presented 
in one report and in the context of historical 
data from Live Health, HP OpenView or Micro- 
muse NetCool. 


Live Health [runs 
on] Solaris and 


looking for — sta- 
tistical analysis of 
network traffic. 


TODD WHIPPLE, INTERNETWORKING 
SPECIALIST, CANADA'S DEPARTMENT 
OF FOREIGN AFFAIRS AND 
INTERNATIONAL TRADE 


| 
| 


engineer at Wang Government Services 
Inc. in McLean, Va. 

It lets a user “see only the exceptions 
you want to see — a particular router or 
LAN link,” he said. 

For example, if a router slows, “every 
computer that touches it will send an 
alarm,” said Elizabeth McPhillips, an 
analyst at Probe Research Inc. in Cedar 
Knolls, N.J. 

Live Health presents the duration 
rather than the number of alarms, thus 
“eliminating the network traffic all 
those alarms would have generated,” 
McPhillips said. 

en Live Health polls devices, 
“it’s not taking all Simple Network 
Management Proto- 
col [SNMP] traps, 
just very particu- 
lar [Management 
Information Base] 
variables,” said Bu- 
gala. “Leaving some 
{extraneous data] 
out cuts down on 
traffic.” 

Live Health ag- 
gregates monitoring 
data from San Fran- 
cisco-based Micro 
muse Inc.’s NetCool 
and OpenView Net- 
work Node Man- 
ager from Hewlett- 
Packard Co. and ac- 
cepts SNMP data 
from sources other 
than its own polling 
agents, Conklin said. 
“You'll still need something like Net- 


we were 


| Cool or OpenView to get the opera- 


tional view,” Bugala said. 

Both Wang and the Canadian foreign 
affairs department also use HP’s Open 
View Network Node Manager. 

“There’s no one universal product 
for everyone,” Drogseth said. An enter- 
prise’s size, complexity and goals affect 
its choices of tools, he said. 


Other Options 

A similar management package could 
combine tools such as NetScout from 
NetScout Systems Inc. in Westford, 
Mass.; Spectrum from Aprisma Man- 
agement Technologies in Durha 
N.H.; and VitalSuite from Murray Hill, 
NJ.-based Lucent Technologies Inc., 
Drogseth said. 

“IT would dare to say that [Nortel Net- 
works Corp.’s] Optivity or Cisco’s Net- 
Flow or others can provide some or 
all of what Live Health does,” Whipple 
said. 

“It’s the only one I’ve seen that’s 
showing this view in this way,” 
McPhillips said. “And Live Health is 
very intuitive. You can get the informa- 
tion in other products, but it’s a bit of a 
trial.” 

Pricing for Live Health, an add-on to 
Concord’s Network Health, starts at 
$35,000. D 
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BY JENNIFER DISABATINO 
Before trusting your data and your Web 
site to an application serv 


e provider | 


TECHNOLOGY 
Verio Outages Point Out Customer Need for Backup 


or Web hoster, make sure you've got a | | 


backup plan. 


That’s the advice from some analysts | 


and users after thousands of e-com- 
merce sites were taken off-line and 
some destroyed altogether by unrelated 
outages at two Verio Inc. data centers. 
While Englewood, Colo.-based Verio 
is a large player in this space, business- 
es and analysts agree that the size of the 
company is no guarantee of service. 


Bob Zimmerman, an analyst at Giga | 


Information Group Inc. in Cambridge 
Mass., said customers should carefully 
check their contracts with 
providers. 


service 


“If you’re not making [backups] a | 


contractual requirement and periodi- 
cally demanding proof ...then you, as a 


corporate officer, are negligent,” said | 


Zimmerman. 

In some jurisdictions, data is cor 
ered as much an asset as a factory 
merman said, and a company may have 
legal recourse to recover damages in 


.1m- 


much the same way it would if one of its | 


capital assets were destroyed. 


No Guarantees 


The contract, however, doesn’t al- | 


ways guarantee protection. 

“Having seen a number of vendor 
contracts,” Zimmerman said, “I would 
bet next week’s salary if you signed a 
vendor contract, it says he’s responsible 
for nothing.” 

While large companies and resellers 
may have the leverage to demand guar- 

s, Zimmerman said, “probably th 
little guy is going to lose out.” 

Many companies go with an applica- 


TALK ABOUT YOUR HANDHELD SECURITY. . . 


How do you absolutely protect a 
notebook computer from hack- 
ers? One way is with a biometric 
Type Il PCMCIA card (shown) 
with a pop-out fingerprint sen- 
sor. The Ethenticator MS 3000 
can eliminate the need for pass- 
words, the company says, by al- 
lowing access to Windows appli- 


” 


cations or Web forms only if a user’s fingerprint matches a stored image. The card is now 
shipping for $199 from Lake Forest, Calif.-based Ethentica Inc. (www.ethentica.com). 
Ethentica is also planning pilot implementations of the card with companies such as Com- 
puCom Systems Inc., Amdahl Corp. and The Fijitsu Group. The card is driven by SecureSuit, a 
group of security applications that includes the SecureStart software needed to perform fin- 


gerprint recognition. 


“Many companies have promised biometric products like this,” says Ethentica CEO Doug 
Antone. “But ours is the first that actually works, is commercially acceptable and at the right 


price point.” 


Cethentica 


c 


Check your contract. Make backup part of the | 
contract, and knowif your provider guarantees § 


" mContract with two ASPs. You may be able to 
arrange for one to be a backu: 


® Have an emergency backup. For example, 
; you could get a cheap, Web-based e-mail 
count to keep in contact with the outside 
dif your site and e-mail go down. 


tion service provider (ASP) to cut costs 
and headaches, but protecting their | 
data or their Web sites may be worth 
the cost of having backup plans, said 
Rich Ptak, an analyst at Hurwitz Group | 
Inc. in Framingham, Mass. | 
“If it’s a significant revenue source, 
[customers] should look at themselves 
or a backup supplier” to keep a site up if | 
an ASP or Web hoster fails, Ptak said. | 
It’s shortsighted to expect Verio and 
other similar companies to take the sole | 
responsibility for a company’s backup, 
said Randy Kerns, an analyst at Evalua- 
tor Group Inc. in Englewood, Colo. 


A Look Under the Hood 


When looking under the hood of an 
ASP, uptime is a key indicator of perfor- | 
mance, said an executive at software | 
vendor L stems Inc. 

While an ASP may tell you that it has 


| 
| 
| 
| 
| 
| 
| 
| 
| 
| 


-Jennifer DiSabatino 


99.99%, or even 99.999%, uptime, that 
doesn’t necessarily tell the whole story, 
said Frank Sowin, director of the service 
provider business unit at the Mountain 


| measure 
| doesn’t necessarily measure applica- 


View, Calif.-based company. 
That’s because uptime not 
application response time. It 


does 


tion availability. It does not measure 


| server availability, and so those are all 


important,” Sowin said. D 
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BY DAVID ESSEX 


TECHNOLOGY 


The ‘Traveling 
Whiteboards 


l SEEMS SILLY TO TALK about the “installed 

base” of whiteboards or to wonder about the 

etiquette of capturing information from white- 

boards that aren’t yours. But some simple yet 

amazing technology is hastening the day when 

electronic whiteboards will be embedded in 
office equipment and the scribbles we produce with 
them will be shared routinely over the Internet. 


What will enable this is, in 
large part, the arrival last year 
of two products that took 
electronic whiteboarding to a 
new level of portability: Mimio, 
from Boston-based Virtual Ink 
Corp., and the slightly newer 
and smaller eBeam, from Elec 
tronics for Imaging Inc. (EFI) 
in Foster City, Calif. Both are 
small, lightweight devices that 
fit into a carry-on bag or note- 
book case and can be attached 
to almost any whiteboard tem- 
porarily, letting you save board 
markings electronically. 

Prior to the release of Mimio, 
an electronic whiteboard was 
considered portable if 
could wheel it into a conference 
room. Those big units, typically 
costing $1,000 to $3,000 and of- 
ten called copyboards, normal- 
ly print out information on fax- 
like thermal paper (though 
some work with standard pa- 
per) and can download data to | 
a PC. More sophisticated color 
whiteboards use pressure-sen- 
sitive technology similar to | 
that of digital tablets to pin- | 


you 


MIMIO 1.1 | 


Virtual Ink Corp. 
www.virtual-ink.com 
$499 (street) 


point pen position; they’re 
about twice as expensive as 
copyboards. So-called white- 
board features in remote con- 
ferencing software like Micro- 
soft Corp.’s NetMeeting and 
videoconferencing 
are geared toward one-on-one 
communication and require 
mouse or pen-and-tablet con- 
trol hardly a real-world 
whiteboarding experience. 
With 16 million whiteboards 


systems 


installed in offices (according 
to Virtual Ink), odds are you 
can use the eBeam or Mimio 
capture devices while travel- 
ing, without having to tote 
your own board. Is it rude to 
pull out a Mimio and put it on 
someone else’s board? Proba- 
bly not if you ask first, talk 


| about your toy and promise to 


share the resulting file. 

EBeam and Mimio separate 
the capture mechanism from 
the board surface. They use in- 
frared light to recognize the ac- 
tivation of special pens and 
ultrasound to locate their posi- 
tions. The bulky pens contain 


transmitters, and standard eras 
able markers slip inside. 

Both companies say separat- 
ing out the capture technology 
will allow for the development 
of all 
board devices in the near fu- 


sorts of clever white 
ture. They'll be easier to build 
into rooms because the two 
main components will be less 
expensive individually and will 
be able to be paired for less 
than it costs to buy all-in-one 


whiteboards 


What You Get 


The two devices differ phys- 
ically far more than they do 
technically. Besides having a 
smaller, 


two-piece sensor, 


eBeam’s markers are some- 
what thinner and easier to han- 
dle. But eBeam requires an AC 
adapter, and it sacrifices some 
onboard control by not having 
any room for buttons on the 
sensors. It makes up for this in 
part by providing a virtual con 
trol pad, called a shortcut strip, 
that lets you start new pages 
and print pages by tapping on 
the board. 

EFI claims that the two watch 


EBEAM 1.1 

Electronics for Imaging Inc. 
www.e-beam.com 

$500 (street) 


batteries inside each eBeam 
marker last longer than its com- 
petitor’s single AAA battery per 
stylus, but I couldn’t verify this. 

Mimio’s hardware 


nearly as compact as 


sensor 
isn’t 
eBeam’s, but it uses the extra 
real add 
board controls for starting 
and printing boards, “tagging” 
boards so they can be inserted 
into session files and activat- 
ing a virtual control pad that’s 
far more versatile than eBeam’s 


estate to more on- 


(and even includes a calculator). 

Its electronic eraser has both 
a narrow pad and a wide pad, 
which I prefer to eBeam’s sin- 
gle eraser. Its capture bar gets 
power from a more convenient 
adapter that plugs into the PC 
keyboard connector. Both units 
plug into a PC’s serial port and 
have optional Universal Serial 
Bus adapters. 

I tried both products, and I 
had to struggle a bit with both 
to get them to recognize all my 
marker strokes. The key, I 
found, is to press down hard 
and consistently enough to 
keep the pen’s transmitter acti- 
vated throughout the stroke. 

The software for both pro- 


grams provides the kinds of 


controls you might expect 
would accompany electronic 
capture, letting you adjust for 
different-size whiteboards or 
alter the electronic image, for 
example. Both have playback 
features that let 
tape-recorder-style buttons to 
move back and forth through 
individual marker strokes (but 
eBeam can’t jump whole pages 


you press 
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like Mimio can). The compa- 
nies say this feature is helpful 
in reconstructing the sense of a 
meeting because it can remind 
you of the order in which items 
were written. 

Overall, eBeam’s 
isn’t as feature-rich as Mimio’s 
It does, however, support live 
group conferencing both na- 
tively and through NetMeet- 
ing. Mimio requires NetMeet- 
ing on the sending side for its 
conferencing function, but this 
feature was recently upgraded 
to allow NetMeeting users to 
view whiteboards without 
needing Mimio software. 

Mimio comes 
handwriting-recognition soft- 
ware from San _ Jose-based 
Vadem Inc.’s ParaGraph divi- 
sion. I found its recognition 
rate to be poor, probably be- 
cause I couldn’t get Mimio to 
reliably capture marker strokes. 

While I found both products 
fun and useful once I got the 
hang of them, I prefer eBeam by 
a slight margin because its two 
soap-bar-size sensors are more 
portable and 
than Mimio’s single retractable 
bar; it also captured strokes 
more reliably. Mimio is a com- 
parable value that’s helped by 
its superior feature set, but I 
found it less reliable and some- 
what inconvenient to handle. 
Either device would serve well 
anyone who regularly conducts 
meetings and ad hoc presenta- 
tions on the road. B 


software 


also with 


seem sturdier 


Essex is a freelance writer in 
Antrim, N.H. 
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HOT TRENDS & TECHNOLOGIES IN BRIEF 


rogramming Languages 


DEFINITION 
A programming language is a set of 
keywords (the vocabulary) and a 
system of rules (the grammar or 
syntax) for constructing state- 
ments — consisting of groups or 
lines of numbers, letters, punctu- 
ation marks and other symbols 
— by which humans can com- 
municate a set of instructions to 
be executed by a computer. 


BY RUSSELL KAY 
UMB — that’s the 
only word to de- 
scribe computers, 
because they know 
only two things: 

zero and one. But they manipu- 

late those bits so quickly, they 
can accomplish useful tasks. In 
fact, some early computers 
were programmed by setting 
sequences of ones and zeros 
on front-panel switches. 

That’s clearly the low point 
in user-friendliness and ineffi- 
ciency. Programming _lan- 


guages were created to give us 


humans a chance to under- 
stand what it was we were 
telling the computer to do. 

Programming languages in- 
corporate important 
ideas. They abstract operations 
into a form that’s more like the 
way people think, which makes 
programming easier. To divide 
one number by another is a 
simple concept that we express 
in a couple of symbols, but to a 
computer, that same task takes 
dozens of small operations. 

in addition, programming lan- 
guages let us give meaningful 
names to things like variables 
and constants, which makes 
programs easier to create, un- 
derstand and troubleshoot. 

At the lowest level, the zeros 
and ones of machine code aren’t 
really a language at all. The ear- 
liest true language was assem- 
bler, and it was different for each 
type of computer. Assembler 
used abbreviations for common 
operations (such as ADD, MOV, 
JMP), with each followed by the 


several 





address of one or more parame- 
ters. Recognizable names re- 
placed numerical addresses, and 
the resulting programs were far 
easier to work with. Assembler 
is called a low-level language be- 
cause it gives complete access to 
a computer’s basic instructions. 
It’s still used for some routines 
when it can produce more effi- 
cient code than other languages. 


Different Strokes 


But how could you make a 
program run on two different 
computers? You would have to 
reprogram it for the second 
machine’s instructions. The 
answer was a higher-level lan- 
guage that could be adapted 
to different computers by pro- 
cessing the application code 
through another program, 
known as a compiler, which 
translated the application into 
machine code and stored it as 
a file. Or it could be done 
through an interpreter, which 


| did the same job as a compiler 


Just Do It! 


Whatever the design or look, 
languages allow programmers 
to use the following elements: 
Sequential operations: After executing 
one instruction, the machine goes to the next 


Comparisons and branches: Depending 
on the value of a given variable or register, the 
computer either executes the next instruction 
or instead branches, or jumps, to a different 
place within the program. 





on the fly and then ran the pro- 
gram without storing it. The 
compiler or interpreter was 
specific to each computer type, 


but it needed to be created | 


only once and could then 
process many programs writ- 
ten in the high-level language. 
The first important language 
like this was Fortran (short for 
“Formula Translation”), which 
is still used by scientists and 
engineers. 


Proliferation 

Thousands of programming 
languages have been devised, 
but only a few are in common 
use (see “A Linguistic Sam- 
pler”). Various organizing prin- 
ciples underlie these languages: 
= To simplify and streamline 
the handling of specific types 
of information, such as strings 
of characters (Snobol), matri- 


ces (APL), logical expressions | 


(ProLog) or databases (SQL). 
w To facilitate certain styles of 
programming, including pro- 
grams that nonprogrammers 
could hopefully understand 
(Cobol, Basic), very large pro- 
grams (Ada), object-oriented 
programming (Eiffel, C++, Java, 
SmallTalk) and visual 
gramming, where the user re- 
lates icons to one another and 
uses property sheets to de- 
scribe their interaction (Salsa, 
Visual Basic, Visual C++). 
# To simulate a theoretical or 
real-world situation involving 
random events (Simula, GPSS). 

In addition, languages can be 
described as procedural (exe- 
cuting in a given order, depend- 
ing on the data), event-driven 
(they sit there until something 
happens and then respond) or 
cyclical (repeatedly executing a 
fixed cycle of operations). 

Many programming _§lan- 
guages are now historical foot- 
notes (Algol). Others are 
strongly identified with specif- 
ic areas: (Cobol, 
RPG), computer science and 
artificial intelligence (Lisp, 
ProLog), teaching how to pro- 
gram (Basic, Pascal), systems 
software (C, C++), the Web 
(HTML, Perl, Tcl) and publish- 
ing (SGML, PostScript). 

Some languages were de- 
signed to be interpreted not by 
the computer but by another 


pro- 


business 


@ Are there technologies or issues you would like to learn about in QuickStudy? Please send your ideas to quickstudy@computerworld.com. 








application. These are called 
scripting (Visual Basic Script, 
JavaScript) or macro languages 
(Rexx, HyperTalk). 

Programs aren’t necessarily 
restricted to a single language. 
Most large programs incorpo- 
rate routines, libraries, func- 
tions and other types of pro- 
gram segments that have been 
created using different lan- 
guages. In fact, it isn’t neces- 
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sary to know what that original 
language was. 

Finally, the Web has sparked 
a whole new spectrum of pro- 
gramming languages. HTML 
and Java are the universal lan- 
guages of the Web. Tcl is the 
underlying language for www. 
computerworld.com. Java was 
developed for the Internet, and 
Microsoft has announced its 
newest language, C#.D 


A Linguistic Sampler (entries in red are more widely used) 
a CT CT TTT 
ADA 1980-83 General apps 


1958 
1960s 


Algol 
APL 
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Systems 
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Fortran 
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PL/I 
PostScript 


Tel 

TeX 

Visual Basic 
Visual Basic 
Script 


Education 


Used by DOD 


Scientific 
Scientif 


Uses cryptic symbols, 
matrix operations 
Microsoft's first prod- 
uct: a Basic interpreter 
Original Unix language, 
with low-level access, 
Primary systems, app 
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gramming language 
Very verbose 


Stack-oriented, 
threaded language 
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(Statements (use 
(many) parentheses) 


Powerful scripting lan- 
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Stack-oriented, 
threaded language 
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First object-oriented 
language 
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As computer game machines come 
with more features, they have the 
potential to take on PC functions. 

By Mathew Schwartz 


l’S THE BATTLE for de- 
livering new 


paid content to 


sumers. On one side of | 


the ring: PCs, WebTV, 
inexpensive Web-surfing ap- 
pliances and many companies 
trying to decide how and when 
television and the Internet will 
“converge.” On the other side: 
Sony, and a machine ostensibly 
built to play games. 

Sony Corp. is poised to do an 
end run around every other 
company trying to figure out 
which Internet device — after 
PCs a majority of con- 
sumers will embrace in their 
homes. Sony plans to do all this 
with the $299 PlayStation 2 


Nintendo 
Microsoft 


types of 
con- | 





(PS2), which debuts in the U.S. 
this fall. 

Don’t let the purple high- 
lights fool you: Besides playing 
DVD games, the PS2 is also a 
Net-capable multimedia de- 
vice that can surf the Web, 


send e-mail and play DVD | 


movies. More important, ana- 
lysts say, it will be the first 
home-based multimedia and 
Internet-capable device since 
the PC to sell millions of units. 
Those units, attached to con- 
sumers’ televisions, will give 
Sony a standard platform for 
selling content. The company 
will be able to offer, for broad- 
band downloading, movies to 
rent, new games or music for 





| MP3 players. It will also be 


able to sell PS2 owners sub- 
scriptions for Internet access 
or online gaming. 

Forty percent of U.S. house- 
holds already own a gaming 
system. Last year in the US., 
the industry generated more 
than $7 billion. As more con- 


| sumers buy Internet-capable 


gaming consoles, the potential 
for services revenue increases. 


| Tokyo-based Sega Enterprises 


Ltd. already has a subscription- 
based online multiplayer gam- 
ing zone for its next-genera- 
tion Dreamcast console. 

Sony has also announced an 
electronic distribution net- 
work via broadband for the 


| PS2. Next year, consoles from 


Kyoto, Japan-based Nintendo 
Co. and Microsoft Corp. will 
hit the market. Some analysts 
predict that console makers 
might distribute machines for 
free, if consumers sign up for 
multiyear Internet service pro- 
vider contracts. 

Sony says it will offer an Eth- 
ernet adapter card for the PS2. 
Next year, it will also begin dis- 
tributing electronic content via 
a secure, encrypted network. 
Users will be able to download 
games to a peripheral PS2 hard 
drive. Presumably, users could 
also order content such as 
streaming movies. 

Unlike in today’s PC operat- 
ing system market, there is no 
one dominant next-generation 
game console maker. Many ex- 
perts pick Sony as the likely 
winner, but that presupposes 


Early edge: 2 million already sold 


Sony currently dominates the game-console market 
with the 5-year-old PlayStation 


Nintendo's last console, N64, wasn’t a market success 


It will be the first time that Microsoft, a newcomer to the 
game-console market, has made its own hardware 





that customers will embrace 
the hardware and that game 
makers will develop the choic- 
est titles for PS2. 

While PS2 will hit shelves 
this fall, the broadband tech- 
nology and peripherals won't 
make much headway until next 
year. Even then, experts say, 
determining the winner will 
mean waiting for game devel- 
opers to learn how to wring 
every last polygon out of the 
hardware and software. 

“Generally, game consoles 
have a five-year life span, and 
two to three years in, develop- 
ers really get an idea of what 
the hardware can do,” says Billy 
Pidgeon, an analyst at Jupiter 
Communications Inc. in San 
Francisco. 

Until then, expect the com- 
petition to keep heating up. D 
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Sony PlayStation 2 


CPU CORE: 128-bit RISC 

CLOCK FREQUENCY: 300 MHz 
RAM: 32MB 

DVD-ROM: Plays games, DVD 
movies, CDs 

PORTS: Universal Serial Bus (2), 
i.Link (IE1394, a.k.a. FireWire), Type 
Ill PC Card slot 


In comparison, today's top-end PCs 
can have 512MB of RAM with 866- 
MHz chips inside. But because game 
consoles are designed to play games, 
and not run overblown operating sys- 
tems, their games often have better 
resolutions and crash less often. “The 
PC is being used for entertainment 
purposes, but it's accidental and not 
very good, because it’s designed for 
so many other purposes,” says David 
Cole, president of game-analyst firm 
DFC Intelligence in San Diego. 
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TECHNOLOGY 


Masters of high-end stor- 
age often devise their own 
tools and strategies. Here 
are a few of their secrets. 
By Elizabeth Ferrarini 


BRIAN DURKIN at DSL 
provider HarvardNet says 
his company will continue 
to update its homegrown 
storage management 

Sy Cub the business 
eles ma 


NTERLAND INC., a Web hosting 
firm in Atlanta, decided to build, 
rather than buy, a tool to track 
space usage for its more than 
78,000 small to medium-size 
Web sites. Seventy percent of 
the sites reside on Windows 
NT servers and the rest are on 
Linux. A 6 terabyte (TB) XP256 
RAID system from Hewlett- 
Packard Co. provides the main storage. 

So, what’s going on here? Tools for 
monitoring and reporting disk space 
usage for Windows NT servers have 
existed since the operating system first 
came on the market. 

“We looked at a lot of off-the-shelf 
tools, but they didn’t offer the scalabil- 
ity to support an application service 
provider environment. So we built,” 
says Robert Malally, Interland’s chief 
technology officer. 

Load balancing. Capacity optimiza- 
tion. Storage quota management. Ser- 
ver availability. When it comes to basic 
storage management applications, 
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many e-storage services have decided 
to build rather than buy, even from re- 
spected storage management vendors. 

The Internet has redefined storage 
management requirements. Informa- 
tion technology departments now hand 
off e-commerce storage to outside ser- 
vices, ranging from regional Internet 
service providers to Fort Knox-like 
data centers. These e-storage services 
must provide extreme storage scalabil- 
ity, almost 100% system availability and 
flexibility to manage growing collec- 
tions of storage resources. 

John Webster, a storage analyst at 
Illuminata Inc. in Nashua, N.H., says 
one e-storage service has seen its stor- 
age capacity growth rate go from 1TB 
per month to 1TB per week. “A lot 
of storage management tools on the 
market just can’t handle this kind of 
growth. E-storage services can easily 
justify building management tools for 
the most mundane tasks,” he says. 


Homegrown Foundations 

Although the company has reached 
a level of success, as indicated by its 
$200 million in funding to date, Har- 
vardNet Inc., a Boston-based Digital 
Subscriber Line (DSL) provider and 
Web hosting service, has continued to 
update and use its homegrown tools 
for managing storage on Windows NT 


and Sun Solaris servers. 


Brian Durkin, director of systems 
engineering at HarvardNet, says some 
of those tools date to 1996, when the 
company’s hosting business began. 
For its shared-server service, Harvard- 
Net uses its disk utilization tools on 
Windows NT servers to monitor file 
growth on disk drives, and on Unix 
systems to monitor the file system for 
growth, server problems and growth 
patterns in a customer’s space. 

HarvardNet’s expansion plans in- 
clude opening one 50,000-square- 
foot data center in New York, a second 
in Philadelphia and a third, possibly in 
Washington. “To support the DSL and 
the Web hosting businesses, we’ll con- 
tinue to augment our homegrown 
tools while we evaluate other storage 
solutions, such as storage-area net- 
works,” Durkin says. “We are looking 
at building advanced monitoring tools 
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to handle our capacity plans.” 

Some e-storage services have turned 
themselves into superluxury data ho- 
tels for Fortune 1,000 firms that don’t 
want to haul their servers off to a data 
center and then manage them remote 
ly. Calling themselves “netsourcers,” 
these one-stop-shop online services 
have built a complete IT infrastruc- 
ture, including data centers with server 
and storage hardware (and even spare 
parts), switching equipment, IT per- 
sonnel and storage tools to manage 
everything. Building vs. buying has 
paved the way for some of these e-stor 
age services to set up shop and main- 
tain business. 

Intira Corp., which has three U.S. 
data centers, has built its business for 
Fortune 1,000 organizations that want 
not only to outsource e-commerce but 
also to provide a good home for other 
business applications. Founded in 
1998, Pleasanton, Calif.-based Intira 
has stocked the centers with storage 
products from vendors such as EMC 
Corp., HP, IBM and Sun Microsystems 
Inc. but manages them largely with an 
array of homegrown tools. 

For servers and storage, John Steen- 
sen, chief technology officer at Intira, 
says his company has built an exten- 
sive, real-time system (layered over 
HP’s OpenView) that monitors 400 
data points so customers can be as- 
sured of server availability and ade- 
quate storage capacity. If a customer’s 
storage exceeds a certain threshold, 
then Intira carries out the customer’s 
escalation procedures for allocating 
more space through load balancing 

“We built because there weren’t any 
management suites that went from the 
bottom of the network to the top. We 
didn’t want to buy tools and glue them 
together into a coherent picture for 
our customers,” Steensen says. 


Doubts About Do-It-Yourself 


Another netsourcer, GlobalCenter 
Inc. — Global Crossing Ltd.’s Web 
hosting division, which came with the 
acquisition of Frontier Corp. — has 
built up its IT infrastructure (which 
includes eight data centers) by rid- 
ing on GlobalCenter’s network and 
through a combination of buying, 


torage Tools 


TECHNOLOGY 


building and forming partnerships. 

Jason Schaeffer, director of systems 
and infrastructure at the Sunnyvale, 
Calif.-based company, acknowledges 
that the firm built a lot of storage man 
agement tools during its early years in 
1996 and 1997, but he says GlobalCen 
ter is getting out of do-it-yourself stor 
age tools. “We're not looking to do 
that anymore. We’re getting the key 
storage management tools we need 
either through partnerships or acqui- 
sitions,” he says. 

Schaeffer says a lot of his competi- 
tors have built their own storage man- 
agement tools, but he no longer thinks 
it makes sense for his company. 

“Developing storage management 
suites doesn’t make sense, especially if 


it’s not your core competency,” he says. 


Managing storage capacity on 
servers hasn’t turned into a juggling 
act for GlobalCenter. “We don’t allow 
our capacity to exceed a 40% usage 
rate. If it does, then we go to fail-over, 
Schaeffer says. 

Carl Howe, a research director at 
Forrester Research Inc. in Cambridge, 
Mass., says some of the management 
infrastructures that e-storage services 
have built “may be prone to sporadic 
crashes for no apparent reason or 
staffed with individuals who don’t un- 
derstand how to resolve problems.” 

Another analyst points to a widely 
reported 30-minute outage at Charles 
Schwab & Co.’s Web trading site last 
year that left thousands of customers 
fuming. Schwab was trying out a new 
storage management product it had 
developed for setting up a dedicated 
space for DB2 transaction logs. The 
idea was to keep the logs from filling up 
other storage areas. Ironically, the new 
product generated a large log file that 
filled up a partition. When the storage 
management application tried to access 
data on the disk, the disk locked, bring- 
ing down the entire Web site. 

The outage could have been avoided 
if Schwab had built a tool for detecting 
how quickly partitions filled up with 
log files, but that development was 
overlooked as the tools were devel- 
oped in-house, says Webster. 

Perhaps inevitably, building storage 
tools in-house has given some devel- 


Inside Your E-Storage 
Service's Tool Kit 


How do you know if your e-storage service 
offers a bulletproof environment for man- 
aging Web storage, as well as for optimiz- 
ing storage capacity for maximum perfor- 
mance? Make sure it has the tools to do 
the following: 

mw Easily locate what storage hardware 
(such as physical disks) and software 
(such as remote backup service applica- 
tions) exist within the organization. 

mw Know how much capacity is being used 
at any time and track such usage to tore- 
cast needs and plan storage strategies. 

w Configure a disk subsystem among mul- 
tiple servers on different platforms and de- 
tect and correct hardware and software 
problems (both locally and remotely). 

= Automate the procedure for physical 
movement of outboard data applications 
such as data warehousing or for moving 
items between storage media. 

w Provide central, real-time notification of 
the exact nature of errors in a network and 
maintain a record of those problems. 

@ Monitor on- and off-site tape, optical or 
other media. 

= Provide an ongoing view of the applica- 
tion, server and subsystem performance to 
spot problems not apparent through other. 
more granular disciplines. 

@ Specify rules or policies for managing 
hardware, files, users, schedules and 
media. - Elizabeth Ferrarini 


opers the notion to take their ideas 
to market. 

Chris Hickson and Steve Anderson 
— both veterans of Microsoft Corp.’s 
Microsoft Network (MSN) online 
service — parlayed their knowledge 
of load balancing and experience in 
building load-balancing tools to raise 
$7 million in venture capital to set up 
Viathan Corp. in Seattle. This start-up 
solves one key problem faced by many 
online services: how to allocate Web 
database storage dynamically. 

The duo joined MSN when it was a 
proprietary service with about | million 
users. Anderson, Viathan’s CEO, says, 
“We were working on scaling initia- 
tives for what we thought were a lot of 


} ith 


e - tt ther r 2] 
users. Microsoft then opened the f 1 


1ood 
gates, and we had our work cut out for 
us.” Once it was opened to the Web, 
MSN jumped to 4 million users within 
a few months. Microsoft’s Hotmail ac 
quisition took MSN to 20 million users 
“Very few companies had seen this 
type of scaling,” Anderson says 
He says scaling at the application 
server iayer 
broke at the 
base layer. Hickson and Anc 
wore their fingers out writing 
t back-end databases to ac 
> armies of new user 
nformat 
*y ilso got tired 
around-the-clock to wake 


-rvers that took a siesta 


They found that e-commerce rela 
tional databases yield two types of in 
formation: catalog information, which 
grows statically, and user infor 
which grows exponentia 

“Amazon.com may add 200 new ti 
tles to its book catalog daily but add 
5,000 new users each day, along with 
information about current use 
database has to keep track of each 
user’s purchases, shopping-cart history 
and pages clicked on,” says Andersor 


Stor: management tools can’t handle 


the massive scaling required by this 
type of Web data, he says. 

The duo built the Viathan load 
balancing software for Web sites such 
as Hotmail and established e-storage 
services that maintain user information 
in back-end SQL Server databases. The 
software virtualizes back-end databases 
across a cluster of thin Windows NT 


The software handles the par 


servers 
titioning, clustering, replication and 
fault tolerance for the entire system. 
Anderson says that many storage 
nanagement issues for the Web have 
yet to be solved and that some of the 
answers are being developed in IT 
shops right now to address specific 
problems. “IT professionals shouldn't 
hold back their entrepreneurial ambi 
tions, especially if their storage man- 
agement tools can satisfy a universal 


customer need,” he says. D 


Ferrarini is a freelance writer in 


Arlington, Mass 
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Boeing’s advanced research unit has two jobs: 
to ‘make sure something doesn’t sneak up on 
us’ and to develop new technology, such as 
computers that predict how a part will feel 
before it’s built. By Gary H. Anthes 
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TECHNICIAN reaches be- 
hind a panel in the cockpit 
of a Boeing airplane and 
feels around for a part that 
needs to be replaced. He 


; unsnaps it and tries to pull it out, but 
| the part bangs into one obstruction and 
then another. 


No matter how the technician ma- 
neuvers it, or how hard he pulls, the 


| part remains trapped by surrounding 


components. The technician finally re- 


| alizes the part is just too big to remove. 


But no passengers will sit on this jet 


| waiting for the problem to be solved. 


The part just needs a little design 
tweaking — in software — before it’s 
built and put into a real airplane. De- 
signing a complex structure with a 
computer isn’t new. The Boeing Co. de- 


| signed the 777 airplane in the early 


1990s without ever building physical 


| mock-ups or prototypes; the 777 was 
| the first airplane ever “preassembled” 


that way. But now Seattle-based Boeing 
is pushing the computer-aided design 


| and manufacturing envelope in a new 


direction, called “haptics.” Inventing 


| the information technology behind 


haptics is the job of Phantom Works, 
Boeing’s Bellevue, Wash.-based ad- 
vanced research and development arm. 


Computer-Aided Touch 

Haptics — from the Greek word hap- 
tein, to touch — is virtual reality that 
users can feel as well as see. Manipulat- 
ing a robotic arm, the designer guides 
an image of a part through an assembly 
on his screen. When the part hits some- 
thing, the arm stiffens and stops. The 


| designer can maneuver the part and 


feel the result, just like he would if he 


| were handling a physical object. 


“Now, we'll not only build the mock- 
up electronically, we will simulate what 


| it’s like to service it when it’s in the 
| field,” says Boeing CIO Scott Griffin. 


“We can go out to our airline customers 
and say, ‘We have actually maintained 


| this airplane already, in the computer, 


and we know we are not creating prob- 


| lems for you.’” 


The mission of Phantom Works, Grif- 
fin says, “is to look at what’s coming 
down the pike — what’s several years 
away — and pull it back to today and 
deploy it at Boeing.” 

Phantom Works employs about 4,000 


| scientists and engineers in areas such 
| as manufacturing, avionics and IT. The 


Mathematics and Computing Technol- 
ogy (M&CT) unit within Phantom 
Works has an annual budget of $40 mil- 
lion and 250 researchers, most of whom 
hold advanced degrees in computer sci- 
ence. Current projects include research 
in expert and neural systems, commu- 


| nications, distributed systems, visual- 
| ization, performance and _ scalability 


modeling, intelligent agents, intrusion 


| detection and 16 other topics. 


“Our group looks at those technolo- 
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gies that cut across the whole company 
and tries to understand what are the 
trends in those areas,” says Albert Eris- 
man, director of M&CT. “We do R&D 
and advanced prototyping, but it’s more 
‘R’ than ‘D.’” Each year, Erisman says, 
he creates a detailed 10-year technolo- 
gy forecast for the company. 

Boeing put all its R&D teams — IT, 
engineering, manufacturing and so 
forth — in one organization so they can 


cross-pollinate. “For example, one of 


the things M&CT works on is high- 
speed machining,” Griffin says. “That’s 
not a computing application per se, but 
the math and algorithms behind it — 
for example, how fast can a cutter move 
across a surface but not generate too 
much heat — came out of that organiza- 
tion. Erisman’s people are right on the 
bleeding edge of that. 

“M&CT has two jobs,” Griffin adds. 
“One is to look forward and make sure 
something doesn’t sneak up on us, like 
Amazon.com sneaked up on Barnes & 
Noble. The other is to help deploy tech- 
nology. So they don’t sit in a lab, they 
spend considerable time out in the fac- 
tory.” 

A big jet contains some 3 million 
parts, and its life cycle can span 70 
years, from initial concept to final land- 
ing. But the underlying IT changes 
every 18 months, Erisman says. “There 
are some unique problems associated 
with the size and life cycle of our prod- 
ucts — the complexity, safety issues 
and so on,” he says. 


Filling in the Holes 

“These issues are the drivers for us in 
terms of what R&D is required,” Griffin 
says. “What we are trying to do is un- 
derstand The Boeing Co., understand 
where we can use existing technology, 
understand where the holes are and 
then fill the holes.” 

There are a lot of holes. While Boe- 


ing’s goal is to buy commercially avail- 


able IT products whenever possible, of- 
ten those products need to be modified 
or enhanced in order to scale up for use 


at the $58 billion aerospace company, | 


says Kenneth Neves, M&CT’s director 
of computer science. “For example, you 
can buy something like [Microsoft’s] 


NetMeeting, and two or three people | 


can have a conversation. You try to do it 
with 30 to 40 people, and it falls down.” 
And sometimes the needed technolo- 
gy doesn’t exist. “We are building infor- 
mation systems for the military, and we 
are using hybrid satellite networks and 
everything is mobile,” Neves says. “Not 
just the nodes, but there are mobile net- 
works within the network, and we have 


what we call ‘system-of-systems’ issues. | 
This is an area where the consumer | 


market doesn’t provide the answers.” 
Sometimes the answers come wholly 
from within Phantom Works, and 


sometimes they come from research | 
partnerships that Boeing maintains | 
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with other aerospace companies, IT 
vendors, universities and government 
agencies such as NASA and the U.S. De- 
partment of Defense. Its relationships 
with universities are especially close, 
and professors often do their sabbati- 
cals at Boeing. “They love it at Boeing 
because it has such a rich collection of 
problems,” Erisman says with a laugh. 

Boeing is working with the Universi- 
ty of Washington at Seattle on the hap- 
tics project and with the University of 
Calgary at Alberta on mathematical 
models of how business decisions are 
made. 


Legions of Computers 

Phantom Works is also experiment- 
ing with software developed at the Uni- 
versity of Virginia at Charlottesville. 
Called Legion, it’s a wide-area operat- 
ing system designed to build a virtual 
computer from any number of distrib- 
uted hosts and objects while presenting 
to the user the image of a single com- 
puter. 

Legion finds and schedules resources 
and handles security issues among dis- 
parate operating systems and objects 
written in different languages. Neves 
says it could possibly run Boeing’s 
highly complex and distributed prod- 
uct data management and manufactur- 
ing resource control systems. 

Phantom Works has also formed 
R&D partnerships with a handful of 
major IT vendors. “We work on things 
that will benefit both companies,” 
Neves says. “No money changes hands, 
and the individual researchers have to 
want to do it.” For example, Boeing is 
working with IBM to develop computer 
security and intrusion-detection tech- 
nology. 

Boeing is also working on large-scale, 


distributed systems with Hitachi Cen 
tral Research Laboratory in Tokyo and 
HyPerformix Inc., an Austin Texas- 
based start-up. “A concern is, how can 
you know what [the system’s] perfor- 
mance is going to be, where to put the 
data servers, what bandwidth do you 
need and how does it scale with load?” 
Neves says 


Predictive Modeling 

The answer, he says, is “predictive 
performance modeling” in which mod 
els of user behavior are combined with 
models of systems behavior. Just as 
haptics will let Boeing repair a plane 
before building it, this technique will 
let the company stress-test a big system 
before it’s deployed. 

Neves says this new modeling tech- 
nique saved Boeing from buying a $24 
million server last year. “We showed by 
predictive modeling that the way 
{users} were locating and updating 
their data was causing traffic bottle- 
necks on the network,” he says. “Adding 
the server would have reduced perfor- 
mance even more because the plan was 
to further fractionate the database,” 
which would have only increased the 
bottlenecks. 

M&CT’s mission statement says it 
will “create, evaluate and disseminate 
technology. 

“Dissemination is the goal for every- 
thing we do,” Neves says. “If the result 
is a paper widely accepted in the world, 
but it has no impact on Boeing, that 
would be one of our failures.” 

But dissemination is hard, he admits. 
“You have [internal] customers who 
don’t know what the new technology is, 
and you say, ‘This can have an impact.’ 
And they say, ‘Well, it’s also disruptive 
It bothers us. Go away.’ ” D 


CREATING FINE-GRAINED SECURITY 


In March, Boeing and three other companies announced that they would jointly establish an 
independent, Web-based trading exchange for buyers and sellers in the defense and aero- 


space industries. 


But the exchange idea raised an interesting question: How can a system aliow some data 
to be freely shared between partners, or between buyers and sellers, while those same com- 
panies tightly guard other data when it relates to competitive activities? 

The answer is data-level security. Traditionally, companies have protected whole comput- 
ers using firewalls. What is increasingly needed for business-to-business commerce is finer- 
grained protection at the level of individual files or data elements, with access to the data 
based on the profile of authenticated users, says Boeing ClO Scott Griffin [See “Security the 


Way it Should Be,” Technology, July 10}. 


“It's important for us because we'll compete with Lockheed Martin on one program and 
work with them on another,” he says. “So we are shifting from keeping people out of our 
computers to protecting the data in the computer. That's much harder.” 

But hard problems are what Boeing’s Phantom Works lives for, and its computer science 
research group is pioneering data-level security. The exchange will use XML to describe the 
information being shared, and the Phantom Works is figuring out how to embed information 
about security levels into the XML metadata. “What we are doing is using XML to describe 
not only the part, for example, but to have intelligence within [the XML] that includes who 
can see the data and who can't,” Griffin says. “That's a brand-new thing, an R&D thing.” 


- Gary H. Anthes 


Our group looks at 
those technologies 
that cut across the 
whole company 
and tries to 
understand what 
are the trends in 
those areas. 
ALBERT ERISMAN, DIRECTOR, 


MATHEMATICS AND COMPUTING 
TECHNOLOGY UNIT, PHANTOM WORKS 








Because | get sound 
advice and market 
intelligence from IDC, 
the most respected 
name in information on 
ebusiness, technolo 

and the future. 





iB ita ns 








MEL Uy aa eat 
ards UCC 
and technology 


decisions... 


www.idc.com 











COMPUTERWORLD July 17, 2000 


TECHNOLOGY 


A Forecast for Better 
Firewall Performance 


Rainfinity’s node c ‘lustering software 
breaks firewall se server " bottlenec *ks 


BY STEVE ULFELDER 
AINFINITY IN(¢ 
thinks it has found 
a better way to ad- 
dress the th 
‘-abilities” of the 

Internet age: scalability, relia- 
bility and flexibility. The Moun- 
tain View, Calif.-based start-up 
sells clustering software that 
allows information technology 
administrators to quickly cre- 
ate nodes on a network. 

Rainfinity claims that its 
technology allows servers with 
different functions — Web, 
firewall and load balancing, for 
instance — to be grouped into 
a single cluster. 

The goal: to widen network 
bottlenecks and reduce sin- 
gle points of failure through 
simplicity. 

The company’s tools “dupli- 
information for robust 
throughput,” according to Wil- 
liam Hurley, an analyst at The 
Yankee Group in Boston. “It 
simplifies the process and re- 
quires so little input from the 
IT staff.” 

Rainfinity’s biggest competi- 
tors may turn out to be cheap 
“appliance boxes” — dedicat- 
ed, single-function servers. 
The company’s glaring weak- 
ness is that its products work 
only with software-based fire- 
walls from Check Point Soft- 
ware Technologies Ltd. in Red- 
wood City, Calif. 


When It RAINs 


Rainfinity is built around 
a technology called Reliable 
Array of Independent Nodes 
(RAIN). It began as a Califor- 
nia Institute of Technology 
research project funded by 
NASA's Jet Propulsion Labo- 
ratory and the Defense Ad- 
vanced Research 
Agency. 

The original goal of 
RAIN project was to 
the cost of reliable systems” in 
space missions, says Charles 
Fan, Rainfinity’s co-founder 
and chief technology officer. 
NASA 


ree 


cate 


Projects 


the 


“reduce | 


wanted high perfor- | 


mance and high reliability with 
off-the-shelf hardware. 

Fan says he believes Rain- 
finity has achieved this goal 
by reducing the 
network “hops,” 
through which 
This 


or devices 
traffic must 
tends to 


pass. also 


| strengthen the weak links in 


the network chain by eliminat- 
ing single points of failure. 
Rainfinity’s software installs 


number of 


on one server per cluster and 
then propagates itself to the 
rest of the cluster — including 
servers that are installed later. 

This time-saving feature is a 
big benefit to Dresdner Bank 
AG in Frankfurt, says Norbert 
Schaar, a network security 
manager at the bank. 


Widening a Bottleneck 

Ease of implementation was 
also a factor when Boise-Cas- 
cade Corp. 
Rainfinity’s Rainwall over its 
competitors’ products. 

“We looked at some hard- 


recently chose 


RAINFINITY’S (from left) Shuki Bruck, chairman; Charles Fan, 


CTO; senior engineers Phillip Love, Paul LeMahieu and 
Vincent Bohassian; and Gil Magalit, board member c 


Rainfinity Inc. 


Location: 901 Landings Dr., 
Mountain View, Calif. 94043 


Telephone: (650) 625- it 
Web: www. rainfnity. com 


Niche: Internet traffic manage- 
ment software 


Why it’s worth watching: This 
software uses clustering technol- 
ogy to alleviate Web server and 
firewall traffic bottlenecks and 
improve reliability. 


Company officers: 

* Olivier Helleboid, CEO 

* Charles Fan, chief technology 
officer 

¢ Steve Wong, CIO 


Milestones: 
¢ 1998: Founded 
¢ 1999: First product introduced 


Employees: 75; 400% annual 


€ 


growth projected 


Burn money: $15 mil- 
lion from New Enterprise 
Associates and Alloy 
Ventures Inc. 


Ficadibetenes Rainwall 1. 5 
and Rainfront 1.0 both start at 
$4,995 


Customers: Chicago Stock Ee 
change, Scandinavian Airlines 
System, Olde Discount Corp. and 
Xerox Corp 


Partners: Check Point Software 
Technologies 


Red flags te iT: 

© Works only with software fire- 
walls from Check Point. 

¢ With hardware costs dropping, IT 
managers may prefer to reduce 
bottlenecks by adding servers. 


PUT 
oe ERY 


Mer. y 
= mpanns 


ware implementations,” says 
Victor Thompson, a network 
engineer at Boise-Cascade in 
Idaho. “But we have sev- 
en legs off our firewall, so that 
got unwieldy and expensive.” 
Rainfinity 
works on any combination of 
NT and 
Linux platforms, sits between 
the Internet and the corporate 
intranet. Rainwall, 
firewalls and virtual 
networks (VPN), 
firewalls act as a cluster, 


Boise, 


software, which 


Solaris, Windows 


aimed at 
private 
lets several 
wid- 
ening a common bottleneck. 
A recent upgrade added con- 
current VPN load balancing 
and VPN fail-over features 
Rainfront, a newer product, 
also bolsters firewall availabil- 
ity but sweetens the 
traffic management functions 
such as Web server load bal- 
ancing. The latter feature was 
important to Dresdner Bank, 
according to Schaar. 
“As far as I know, 


pot with 


Rainfinity 
is still unique with this fea- 
ture,” he says. 

The bank has used Rainfin- 
ity on many 
servers running Solaris. “ 


clusters of Web 
We're 
using it for resilience,” Schaar 
says. “As the e-commerce stuff 
gets more and more important, 
it’s important that the 


apps are always available.” 


More Add-Ons 


Of course, there are plenty 
of ways to address avail- 
ability. These days, throw- 

ing servers at problems is 


more 


°, easy, popular and cheap. 


% And therein lies the 
rub for Rainfinity: In 
today’s climate, the 
company may have the 

S vest answer to a ques- 

tion that nobody has asked. 

Then again, maybe not. “Our 
competitors might add load- 
balancing [tools] on either side 
of the firewall,” “OK, 
they expanded the firewall — 
but they added two 
links.” That adds up to extra 
network hops that traffic must 
traverse. 

Whether understaffed, har- 
ried IT shops will pay for this 
elegance is an open question. 
“Appliance boxes are cheaper 
and more robust day-to-day,” 
says Hurley. 

Rainfinity’s task, he says, is 
to “add new features to stay 
ahead of the curve.” D 


Fan says. 


more 


Ulfelder (sulfelder@charter. 
net) is a freelance writer in 


Southboro, Mass. 
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Cisco Systems Inc./ 
ArrowPoint 
Communications Inc. 

San Jose 

www.cisco.com 

Cisco recently purchased ArrowPoint 
for its Content Smart (CS) Web switc 
es. The CS line runs network services 
software, WebNS, that perfo 
2 the same functions as Rainfinity tools 
- further blurring the line between hard- 
ware and software in this field 


rms many 


Foundry Networks Inc. 

San Jose 
www.foundrynetworks.com 
Foundry sells a full line of Internet traffic 
management hardware, including 
routers, switches and switching routers 
Its Serverlron switches handle industri- 
al-strength Web loads. - Steve Ulfelder 
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The task of implementing Enterprise Systems Management provides some 
unique challenges to the Information Technology manager: 


According to industry analysts less than 30% 
of all Enterprise Systems Management (ESM) 
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delivered in a timely fashion to meet 
business objectives. 
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‘Tech Corridor 


Forget country 
and western mu- 
sicians. The key- 
boards making 
beautiful music 
here come with 
a mouse and 
monitor - and 
high demand for 
IT workers. 

By Erik Sherman 


F YOU PICTURE Ten- 
nessee as little more 
than a destination for 
country and _ western 


musicians, you're think- 
ing about the wrong type of 
key board. 

This state has information 
technology jobs aplenty, with a 
growing number of companies 
falling in the eastern Tennes- 
area, between Knoxville 
and Oak Ridge. In fact, the area 
has dubbed itself Tennessee’s 
Resource Valley or the Tennes- 
see Technology Corridor, de- 
pending on whom you ask. 

What just about 
does agree on is that the region 
has become a place for IT pro- 
fessionals to work on leading- 


see 


everyone 


edge technology and enjoy a 


low cost of living. 


Job Market 


At one time, working in IT in 


the region probably meant 
working for the government, 
either at a U.S. Department of 
Energy facility like Oak Ridge 
National Laboratories or in a 
U.S. Department of Defense 
facility. 


The government has been 


scaling back its operations, 


cutting approximately 6,000 
jobs over the past seven years. 
But those losses, mostly 


achieved through early retire- 
ment and attrition, have had 
little impact on IT workers. 

More than 500 high-tech 
companies are between Oak 
Ridge and Knoxville. Federal 
technology transfer programs 
have helped spark the growth 
as has the auto industry. 

‘The economy is pretty well 
diversified. There’s a lot of au- 
tomotive manufacturing work 
in the region,” says Tom Rogers, 
president of Technology 2020, 
a nonprofit economic develop- 
ment organization. “We're sur- 
rounded by automotive plants.” 

Toyota Motor Corp. is locat- 
ed a couple of hours north, 
Nissan Motor Co. and 
Saturn Corp. have plants about 


while 


the same distance to the west. 
[That has made the Knoxville 
area ideal for many automotive 
suppliers, virtually all of which 
must have extensive IT infra- 
structures to do business with 
auto manufacturers. 
Companies such as Round 
Dell Com- 


Rock, Texas-based 


puter Corp. and Hewlett- 
Packard Co. have opened large 
facilities in the area. Technolo 
gy 2020 is also developing a 
incubator that is 
scheduled to open in Septem- 
ber. Back-office 
have expanded, with the arrival 
of players such as Atlanta- 
based Nova Information Sys- 


business 


operations 


tems Inc., one of the largest 
credit-card processors in the 
country. The many profession 
als in the area have yet to satu 
rate the job market, though. 

According to Glenn Zahn, 
president of Oak Ridge recruit- 
ing firm Staff LT., a program- 
mer can typically find a new 
position in about two weeks; a 
network engineer might take 
two to three weeks longer. And 
start-ups are on the rise. 

“(The local job market is] 
becoming more active all the 
time. With the high technology 
coming out of Oak Ridge na- 
tional lab, the here 
that are very technical are ven- 
turing into their own compa- 
nies,” explains Zahn. 


workers 


Money Matters 

Income and living expenses 
in Tennessee are both the good 
news and the bad. 

The bad news: IT salaries are 
lower than national averages by 
approximately 3% to 9%, de 
pending on the type of job. 
That’s still better than the pay in 
most other occupations, which 
ranges 12% to 15% less than na- 
tional averages. 

The good news: The area’s 
cost of living can make that 
money look very good. Hous- 
ing costs are 15% lower than the 
national and 
22% less than in major cities, 
with midrange homes running 
from $80,000 to $130,000. 

“Knoxville 
minor market, so we don’t have 
the overcrowding, and there’s 


average almost 


is considered a 


plenty to go around, which 
drives prices lower,” explains 
Zahn. 
Other costs of living are 
comparably low — health care 
costs, for example, run 18% be- 
low the national 
there’s no 


tax. The Oak Ridge office of 


average 
and state income 
Science Applications Interna 
tional Corp. (SAIC), a national 
consulting firm, has found that 
its employees have an econom- 
ic advantage over those work 
ing in major cities 

“To have the same standard 
of living, you’d have to have a 


25% salary increase to be 


p 


even,” says Mike Cuddy 
president for IT 
SAIC’s Oak Ridge office. “Gen- 
erally find it 
much easier to recruit people 
to live in Oak Ridge, Tenn. 
than 
D.C. If you have a family and 
are looking for quality of life, 
interest 


vice 


solutions at 


speaking, we 


we do in Washington, 


educational and cul 


tural interest, this 


very attractive.” 


Quality of Life 


The area is big on outdoor 
and 


region 1S 


recreation, with average 
temperatures of 75 degrees in 
the summer and 41 degrees in 
the winter, it’s easy to see why 

Hiking, white-water rafting 
and kayaking, fishing and golf 
are less than an hour’s drive 
from the Knoxville area. Cul- 
tural activities include a major 
arts festival, two symphony or- 
chestras, several museums, a 
ballet company and a zoo. 

The region is also relatively 
conservative, says Ed Lewis, se- 
nior vice president of corpo- 
rate development at Internet 
Pictures Corp. in Oak Ridge. 
That 
with 


makes for a stable area 
relatively little job-hop- 
ping. Those coming from out of 
state often arrive with a nega 
tive impression of Tennessee 
that gradually changes. 

“When people come to visit 
and see what they’re going to 
get for their dollar 
from a personal point, those 


invested 


questions go away,” says Lewis 

If you want to hop around on 
the Internet, there’s free access 
for individuals and nonprofit 
Knoxville 
metropolitan area is moderate- 


organizations. The 


ly large, with just over 659,000 
residents in 1998, according to 
Oak R 


is tiny in comparison, with a 


the Census Bureau 





population of about 27,000. 
“Oak Ridge ... 
contained town. 


from Knoxvill 


is like a self- 


It’s separated 





, and the hous- 





ing market here is great,” says 
Zahn. 
than what you'd find in a town 


“The arts are better here 


10 times the size.” 
Education is relatively strong, 


with high school students scor 




















ing 11% higher than the 
average on the Schola 
sessment Test 1995. The re 
gion is home to five of the top 10 
public schools in the state, and 
Knoxville is the site of the main 
impus of University f 
Tennessee. D 
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InterOne Marketing Group 
ATTN: Debra Coffey-ClO 
880 West Long Lake 
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and XPEDITOR 
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Technology Professional Services firm with offices in 
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What about your ideas? 


Do they keep you up at night? Once you fall asleep do they become your dreams? 
When you wake up, are they then action items? Ideas mean the world to us at hp 
A diversity of ideas means even more. invent the new hp. Join u 


@ Teme 


The following positions are available in Roseville, CA and Ft. Collins, CO: 


SW TEST ENGINEERS 


Must have experience in system test and/or QA; working knowledge of C/C++, PERL, JAVA 
and/or shell programm: ng; and experience with automation of manual test 


SW DEVELOPMENT ENGINEERS — 


Must have experience develop’ ng commercial software for Unix (HP-UX or Solaris) or 
platforms; 2+ years experience in C/C++ development; demonstrated ability to effectiv vely 
debug and repair software defects familiari ty with o object-ori ented and } distributed systems 
concepts; and a Bachelor's degree in Computer Science or related field 


SOFTWARE INSTALL/BUILD ENGINEERS 


Must have a Bachelor's degree in Computer Science or related field; 1+ year’s experience with 
software development t or software process engineering in UNI X or Windows environment: work 
knowledge of current programming language s such as C, C++, Visual Basic &/or Java; protic 
with script development (ksh, PERL, CGI, etc.);and familiarity with software configuration 


management and software engineering lifecycle 


NETWORK SPECIALISTS 


Must have 3+ yours experience with design, implementation, performance tuning and/or 
troubleshooting of multi platform multi protocol networks working knowledge of network 
management platforms and famili arity with both UNIX and NT environment 


CUSTOMER INTERFACE/PRODUCT 
TROUBLE SHOOTING ENGINEERS 


Must have strong familiarity with Unix and C++ or Java; proficiency with script development 
{ksh, PERL, CGI, etc.); familiarity with software configuration management 


LEARNING PRODUCTS ENGINEER 


Must have a Bachelor's degree in Computer Science, Electrical Engineering or related field 
with significant Computer Science course work, or equivalent education/experie J 
understanding of application developer needs. 


The following position is available in Atlanta, GA: 
Response Center Professional 


Must have a bachelor's degree or equivale ent combination of education and experience in C 
Science, Math, EE, or related field; 3+ years’ relevant industry experience; solid understa . 
Unix and/or NT networking and system management; the demonstrated ability to solve complex 

problems and identify, verify, and document ‘software problems, good understanding of HP’s 
OpenView Network and System Management software or similar products 


HP offers competitive compensation and excellent benefits, including profit sharing, stock purchases 
| or fax your resume with cover 


40) (k) and a retirement plan. For consideration please e |, mai 
letter induding salary expectation and Event# 8603 to: jeff_watt2@hp.com (for positions is Roseville/Atlanta 
e-mail to: audrey_bower@nonhp-am.exch. hp.com thor positions in Fort Collins); Mail: Attn: Jeff Watt 


8000 Foothills Blvd, Roseville, CA 95747-5731 MS 5723: FAX: 916 785-1264, Atin 
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Why have 520 people joined 
Netigy in the last six months? 


We've got a pretty simple goal in mind: 


become the world's next great 
global professional 


service organization. Presumptuous? 
Hardly. 


Not when you look at our place in the new economy. 


We're the premier architect of 
eBusiness infrastructure. 


The Fortune 500 are turning to us to create reliable, secure, 
and scalable eBusiness infrastructures. So we're hiring 
talent, but only the best. If you answer to that description, 
bring your brains and your vision to Netigy. You can start to 
dazzle the biggest, most interesting companies on the globe 


Today. 


For more information please apply online at: 


www.careers.netigy.com 


Netigy 


Driving eBusiness Performance 
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Positions available , : nae science or related or relevant 
throughout the U.S ite ; ; 
Extensive travel and 
possible relocation involved. 
Send resumes to Server, C, C++ and Windows 
BrightStar IT Group, NT. Knowledge of Data Commu: 
950 Tower Lane, Suite #1750, 
Foster City, CA 94404 
or e-mail to: 
resumes @brightstar.com 
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INFORMATION Best International Group PLC, " PENT SERVER | 


our American subsidiary - 


SYSTEMS ose ebeeibad emg S TEMS DEVELOPERS 


as BesTech Inc.) has become 
One of the fastest-growing 


IT staffing companies in the world! \ OBJECT ORIENTED 
a ; 

Since its incorporation on 4 ®) MOHEMS DEVELOPERS 

August 12, 1998, Best@IT Inc. has . 


(ee anlage neggite NEWORK ENGINEERS & 
act an saa la ae ills 2 

solutions to Fortune 1000 companies ® NETWOR ADMINISTRATORS 
throughout the United States - bo 

We currently have immediate openings for ~ DATABASE RCHITECTS & 
our New York/New Jersey, Dallas, Los Angeles “DATABASE ADM { 


and Seattle offices and for projects at a 
variety of other locations nationwide 


We seek IT professionals with a minimum of 2 years 
experience in any of the listed areas 


BatelT Inc. offers a dynamic work environm afong 

with competitive salaries and benefit package including 

paid time off, health sao ie insurance, flexible spending 

accounts and 401(k) with match. For consideration submit your 
resume to your city of preference from the list below. For projects 
in other locations submit your resume along with location preference 
to bestjobs@ eaneee Maro 


-660-1613 
pat>loae eels 
-557-5099 

1-2200 


‘ 16 8" Street, P. daliasjobs@best-people.net 
Pi 
Rivers, WI 54241. Please visit our website e losangelesjobs@best-people.net 


ats ww. fisherhamilton.com. EOE M/F/V/D , 
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REAL-TIME FINANCING SOLUTIONS . The Starting Point 
dl Be on 0 Py eMC eee 


SOFTWARE ENGINEER : | OIE RnR CC Mn MIMS Ue nets gees 
PER SENIOR SOFTWARE ENGINEER been contracted by NORTEL NETWORKS to train and hire 
It’s: Fast. ina individuals to become Nortel Networks Certified Support 
M Specialists. You will be trained on a variety of products produced by 

Nortel Networks, including the Passport 7000 and 15000 switches. 


(www.ecredit.com) 

F Upon meeting certain educational/work criteria, you will be enrolled in 

ebayer baht 4, “NO-COST, INTENSIVE, ALL EXPENSES PAID TRAINING 
DIRECTOR OF FINANCIAL ENGINEERING Caden Maecariia at our Dallas, TX Training Center. 


I a H Pa MANAGER OF Business DEVELOPMENT Successful candidates who satisfy all other Nortel Networks hiring 
Us ob eace Senior DirecTor oF WORLDWIDE criteria will be eligible for a career with Nortel Networks. 
PARTNERSHIPS Bestait & Nortel Networks Have Come Together 
to Change the Face of Network Engineering 
e, 20 Carematrix Driv )2€ To be eligible for our no-cost program you must possess either: 


Minimum 1 year of professional work experience in WAN.Networks 
or Telecommunications. Must be knowledgeable in: 
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300 positions are currently available in most major metro areas. 
CHIEF PROGRAMMER/ Positions involve a mix of telecommuting and 60% travel. 
Object-Oriented investment Software 


Dimensions. 


Best in Network Engineering 

COMPUTER AIDED DECISIONS, — a Boston-area company 5050 Quorum Drive * Suite 700 ¢ Dallas, TX 75240 
gaged in the t of sophisticated software Tel: 972 663 0565 * Fax 972 663 0566 
based investment te F to fill a Chief Programmer / Sr networkjobs@best-people.net 
Object-Oriented investment Software This posit www.bestatit.net 
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Analysts Mixed 
About IBM’s Future 


Some urge caution; others 
see double-digit growth 


BY PIMM FOX 
ADMIT IT: The 
news hasn’t exactly been 
good for companies in- 
volved in the mainframe 


K, LET’S 


business. 

Electronic Data Systems Corp. 
(NYSE:EDS), Computer Sciences Corp. 
(NYSE:CSC), Unisys Corp. 
(NYSE:UIS), BMC Software 
Inc. (Nasdaq:BMCS) 
Computer Associates Interna- 
tional Inc. (NYSE:CA) have all 
warned investors that their companies’ 
performances for this quarter are way 


and 


off projections. 

So where does this leave investors in 
IBM — the bellwether of the industry 
— who have already seen a 5% decline 
in revenue for the first quarter? 

Wall Street analysts interpret IBM 
and its future performance in contrast- 


IBM's closing stock prices in 2000: 


A 


INDUSTRY 
ALMANAC 


ing ways. Don Young, who watches 
IBM for Weehawken, N.J.-based Paine 
Webber Inc., urges caution on the com 
pany, “given near-term weakness in 
global services.” 

He says he anticipates global service 
revenue growth of 5% for the second 
quarter and “would not be surprised if 
the company reports even weaker num- 
bers — as little as no growth.” 
IBM’s 
posting revenue gains of 


Services have been growth 


engine, 15% 
in last year’s second quarter. Estimates 
for the current quarter range 
from 8% to 14%. 

“The hardware segment is 
fraught with extremely diffi- 
cult year-ago [comparisons], 
specifically, hardware revenue growth 
of 22% in the second quarter of 1999,” 
Young says. The revenue shortfall in 
this year’s first quarter was due to a 
decrease in hardware sales. 

Other analysts have come to slightly 
different conclusions. 

Toni Sacconaghi, an analyst at New 
York-based Sanford C. Bernstein & 
Co. Inc., acknowledges that comparing 
this year’s results with last year’s is dif- 
ficult because of Y2k-related demand 
distortions and falloffs in revenue and 
profits. 

But Sacconaghi says he believes that 
IBM will deliver on the “Big 3.” 

“I think they will post double-digit 
growth, 
earnings per share and will register 
strong MIPS growth,” says Sacconaghi 

Stephen R. Weber, an analyst at SG 
Cowen Securities Corp. in Boston, says 


revenue above-consensus 


he sees a recovery in IBM’s OEM busi- 
ness. And while he expects lower rev 
enue in the quarter, 
merce-led services and software sales 
should facilitate stronger growth after 
the second quarter. D 
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NEWS 


With Wireless, Bank 
Enters ‘New Frontier’ 


Wachovia responds early to perceived 
consumer interest and new technology 


BY MATT HAMBLEN 
ACHOVIA CORP. 
knew a year 
ago that wire- 
less banking 
would be key 

to hanging on to its customers. 

And its announcement last 
week of an upcoming pilot 
project that will let customers 
bank from handheld comput- 
ers and smart phones seems to 

have come just in time, as a 

half-dozen of Wachovia's com- 

petitors have recently come 
forward with similar news. 
“We knew a year ago that 
mobile banking was the next 
frontier,” said Lawrence Bax- 
ter, head of e-business at Wa- 
chovia. “You had coming to- 
gether consumer interest on 
the hand and 


one wireless 


technology on the other.” 


Imminent Rollout 
The $68 
bank’s pilot projects will lead 


billion-in-assets 


to rollouts for corporate cus- 
tomers by the fourth quarter 
and consumers by the 
quarter of next year, initially 
allowing wireless monitoring 
and then actual 
cash transfers, bill payments 


first 


of accounts 


and stock trades. 

It will be perhaps the first 
rollout of wireless banking in 
the U.S. for corporate 


counts, analysts said, giving 


ac- 


company treasurers and chief 


financial officers the ability to 
monitor huge cash transfers 
wirelessly and, soon, to autho- 
rize the transfers securely. 

“Every hour that cash sits, it 
costs a company money,” Bax- 
ter said. “This would help peo- 
ple on the move like treasurers 
ensure that a cost-saving trans- 
fer was made.” 

Rather than build security 
solutions from scratch, Win- 
ston-Salem, N.C.-based Wa- 


chovia followed the 


lead of 


other banks deploying wireless 
technology and hired wireless 
integrator 724 Solutions Inc. in 
Toronto. 

Analysts Alan Reiter at 
Wireless Internet and Mobile 
Computing in Chevy Chase, 
Md., and John Pescatore at 
Gartner Group Inc. in Stam- 
ford, Conn., described 724 as a 
leader in wireless banking in- 
tegration work. 


Continued from page I 


Wireless 


of consumers are “highly inter- 
ested in using wireless banking 
services,” said Mark Dickel- 
man, senior vice president of 
wireless and mobile commerce 
at Harris, who cited a 
by Global Concepts Inc. in 


survey 


Norcross, Ga. “The interest is 
very high.” 

According to the survey, 27% 
of North American 
dents are “extremely interest- 


respon- 


ed or interested” in wireless fi- 
nancial services. 

Other banks have also found 
a high level of interest. At Win- 
N.C.-based Wa- 
chovia Corp., which plans to 
begin a pilot project in the next 
few weeks (see story above), 
customers have begun asking 


ston-Salem, 


for wireless services. 

“The actual consumer adop- 
tion rate of mobile devices is 
escalating and will greatly ex- 
ceed PCs in the next couple of 
years,” said Lawrence Baxter, 
the bank’s head of e-business, 
explaining why the bank decid- 
ed to jump to wireless now. 
Neither Harris nor Wachovia 
would disclose how much the 
wireless banking projects cost. 

Five U.S. banks have an- 
nounced plans to offer wire- 
less services; all are clients of 


Among the security protec- 
tions 724 is adding for Wa- 


chovia is automatic notifica- 
tion of customers by e-mail or 
voice mail if wireless transac- 
they 


their 


would 
transac 


crash so 


whether 


tions 
know 
tions were completed. 

The data will be encrypted 
on a virtual private network 
over the Internet, and 
will be authenticated with pri- 
and _pass- 
said. Ideally, 
phone manufacturers and car- 
riers will begin supporting the 


users 


vate user names 


words, Baxter 


use of smart cards that authen- 


Toronto-based 724 Solutions 
Inc., which provides an inter- 
face between banks and wire- 
less devices. Its two main com- 
petitors in this market — New 
York-based W-Irade Tech- 
nologies and Atlanta- 
based S1 Corp. — say they will 


Inc. 


make major wireless banking 
announcements in the next 
few weeks. 

And a deal announced last 
week paves the way for many 
other banks to sign up for wire- 
Ga.- 
based CheckFree Corp., a pro- 
vider of online banking ser- 
vices such as bill payment, an- 


less services. Norcross, 


ticate users before 
access on a wireless 
device is granted, 
he added 

The main benefit 
of working with 724 
is that it will make 
arrangements for 
network reliability 
and security with 
any wireless carri 
er, Baxter said. 

724 will also pro- 
gram and test all 
types of wireless devices to en 
sure that they don’t drop con- 
nections with Wachovia's \ 
server and that the data being 
transmitted 
keypad and screen of the de 


vice it is being sent to, Baxter 


the 


conforms to 


said 
Wachovia information tech- 
staffers will 


nology monitor 


the pilot alongside 724 advis 


nounced a deal with 724 § 


that let 
tomers, including about 350 fi- 


tions will cus 


nancial institutions, sign up for 


wireless banking starting early 
this fall. 

Still, one unknown is how 
quickly customers will over- 
come security 
adopt the wireless services, 
said Richard Bell, an analyst at 
Needham, Mass.-based Tower 


concerns and 


Group. 

“If you were to take all the 
institutions in the U.S. that are 
doing wireless banking and to- 
tal up the total number of con- 
sumers they’re working with, 


ers to deal v 


curity issue: 


every 
gle and hav 
to other ba 
spirit 


tion,” 


WACHOVIA’S 
LAWRENCE BAXTER: 
interest and technology 
come together 


Baxter 
divulge 
the wireless 
mentation, adding that 
been “virtually impossible 
come up with a reliable return 
on-investment estimate 

We 
mates the 


you're on a new 


but truth is 
frontier 
But I’ve 


wireless,” he said 


the trust of the comfy 


is a new bet, 


rt of willing to take the risk 


you'll have 
people,” he 
very worried about initiatir 
transaction — for security 
liability both.” 
Widespread adoption 
wireless banking is still fi 
10 years off, Bel 
“In the U.S., tl 
el is such that i 
much sense,” he 
Americans prefer 
bills by check, many 
automatic 


tions to pay their 


peans use 
plained, and wireless bank 
is catching on faster tl 


result. D 


Security Getting Better, Isn't a Barrier, Analysts Say 


Security for wireless banking trans- 
actions does have its weaknesses, 
but security analysts said banks 
and users can bolster security 
protections. 

“Security is not a reason to slow 
down growth of wireless banking, 
but it is a responsibility of the 
[banks] to continually improve so 
they don’t get embarrassed by loss 
of [personal identification numbers] 
or passwords,” said Alan Paller, di- 
rector of research at the SANS Insti- 
tute in Bethesda, Md., and a Com- 
puterworld columnist. 

Paller and two other analysts said 
wireless transactions are vulnerable 
to hacks at the Wireless Application 
Protocol (WAP) gateway server, 


| 
| 
| 
} 
| 
| 


which sits at the site of the wireless 
carrier today. 

The current WAP standard, WAP 
1.1, “leaves much to be desired,” but 
WAP 1.2 is “much better” for securi- 
ty, said Alan Reiter, an analyst at 
Wireless Internet and Mobile Com- 
puting in Chevy Chase, Md. 

WAP 1.2 will be updated later this 
year, allowing wireless carriers to 
transport encrypted wireless data 
through the gateway and out to the 
desired Web site, such as a bank. 
Today, that encryption is dropped 
momentarily as the data is convert- 
ed from WAP to the wired world, 
analysts said. Even that moment 
is enough time for a skilled hacker 
to retrieve data such as credit-card 


numbers and passwords, analysts 
said 

When WAP 1.2 is more fully im- 
plemented, the gateway server can 
be placed at a bank's premises, 
which is more secure than at the 
phone company’s premises, said 
John Pescatore, an analyst at Gart- 
ner Group Inc. in Stamford, Conn 

Pescatore, Reiter and banks say 
something more than a user name 
and a password should be required 
to authenticate smart phones or 
personal digital assistants. For a 
company treasurer, two smart cards 
that interact with a wireless device 
to authorize a money transfer of 
great value might be necessary, 
Pescatore said. - Matt Hamblen 





have some rough esti- 


FRANK H 


Remaking Microsoft 


ULTIPLE CHOICE: Microsoft.Net is Microsoft 
Corp.’s way of (a) reinventing the mainframe, (b) 
reinventing the Internet or (c) reinventing the PC. 


Tough call, eh? 


Microsoft hates the idea of PCs having to connect 
to a host computer to do something useful. It’s not just Bill Gates — 
Microsoft’s whole corporate culture despises the mainframe as the 
collapsed legacy of past technology on whose rubble the company’s 
wealth and power have been built. Pinning Microsoft’s future on Win- 
dows-reinvented-as-a-mainframe isn’t just unthinkable, it’s absurd. 


Then there’s the Internet, another absurdity 
for a different reason: It’s built on other peo- 
ple’s software, software that Microsoft has no 
way of defining or controlling. You can’t build 
an empire based on cooperation — you've got 
to have control. That’s also fundamental to 
Microsoft’s corporate culture. 

And the PC? It’s been the core of Microsoft's 
culture for almost two decades. 
In 1981, Microsoft’s hot product 
was a plug-in circuit card that let 
Apple II users run CP/M — an 
operating system Microsoft didn’t 
make. But ever since, the PC and 
its software have been the com- 
pany’s bread and butter — and 
heart and soul. Reinventing them 
as a set of distributed services is 
an idea that has to leave a lot of 
folks in Redmond queasy. 

And that’s a problem — for 
Microsoft, sure, but also for the 
rest of us. Because while Micro- 
soft is fighting with itself over 
what .Net will be and do, we can’t 
make plans 

Look at the trouble Microsoft 
executives had last week just 
describing .Net. Paul Maritz 
probably gave the simplest de- 
scription, calling it a shift from 
client/server to “client/server 
services.” Bill Gates’ best shot 
was saying that “everything that 
was an application becomes a 
Web site.” Steve Ballmer gushed 


about the wonders of XML and user interfaces. 


Not exactly a consistent vision, is it? It isn’t 
just the products and services that haven’t been 
rolled out. Right now, it sounds like the whole 
idea of .Net is pre-alpha. 

So is this vapor-vision? I doubt it. I think .Net 
is all about the end of the PC as Microsoft has 
known it for two decades — the PC that’s cen- 
tral to the user’s experience, the PC that runs 


We can't 
make plans 
while we’re 
waiting for 


the applications and gives the user computing 
independence. That’s all over, according to .Net 

Which, of course, means that the core of the 
Microsoft corporate culture is all over, too. 

And no matter how important that change is, 
no matter how crucial driving a stake through 
the heart of the PC may be to Microsoft’s fu- 
ture, it’s going to tear the company apart more 
ruthlessly than any judge. 

Unfortunately, there’s no near- 
term upside to this split — not for 
Microsoft, and not for us. .Net will 
change furiously in the months to 
come — not due to the usual tech- 
nical problems but because, at 
heart, Microsoft won’t want to 
make this revolutionary change. 

That means we won't know 
what we'll be getting. .Net could 
end up as nothing more than a 
scheme for downloading applica- 
tions from the Internet if Micro- 
soft loses its resolve to reinvent 
itself. Or if the company em- 
braces the .Net idea completely, 
Microsoft could radically reimag- 
ine and redefine computing. 

Which will it be? Which do we 
need it to be? Ordinarily, I’d just 
wait for your comments by e-mail 
(and you're always happy to 
oblige). This time, though, I’m 
trying something different: I’ve 
agreed to host a forum at Comput- 
erworld Online. Go to the Web site, 
and on the left-side menu under 
Opinions, click on Forums to find the .Net forum. 

Then let us know whether you think .Net will 
become a trivial change or a real revolution, 
whether Microsoft can pull it off — and 
whether it will be worth the trouble. D 


Hayes, Computerworld’s staff columnist, has covered 
IT for more than 20 years. His e-mail address is 


frank_hayes@computerworld.com. 


NOW THAT ORACLE is in the 
trash-collection business, this 
dot-com headed up by forme 
Microsoft execs is getting more 
serious about garbage security 
Well, sort of. The big plastic 
trash bin next to the copier now 
has a combination lock on the 
lid. “Bet the lock combo is the 
same as the company’s phone 
number,” a pilot fish jokes to a 
co-worker. They try it. “Sure 
enough,” the fish reports, “It 
opens the lock.” 


DEAD ZONE A pilot fish work- 
ing on the database for a hospi- 
tal volunteer group gets a user 
request for database updates 
when someone dies. No prob- 
lem, says the fish; we can add 
fields for users to put in the in- 
formation. “No,” say users, “we 
want it automatically updated 
when somebody dies so we'll 
know when to send flowers.” 


HARDWARE PROBLEM An 
e-business guru at a big whole- 
sale hardware outfit plans to send 
out 40,000 electronic catalogs 
on CD-ROM. But a month before 
they're due to be mailed, he can't 
send a test order using the CD 
Programmer pilot fish can't ei- 
ther; the server seems to be tied 
up. Turns out the server has a 
fast CPU, a big hard drive - and 
a single 28.8K bit/sec. modem 


DON’T GET ME WRONG IT 
managers can't make any sense 
of the IT director's plan to re- 
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organize the department - each 
one has a different understand- 
ing of what the boss meant in 
the meeting when it was an- 
nounced. This pilot fish asks the 
director for clarification, eliciting 
this helpful response: “I was in 
tentionally vague so that no one 


would get the wrong idea.” 


THIS IT SERVICE PROVIDER 
sends the troops a memo urging 
them all to become better in- 
formed about viruses by reading 
the attached Word file describ- 
ing what viruses are, how they're 
spread and how to avoid them 
Next day, another companywide 
e-mail hits the mailboxes, “urg- 
ing us not to open the attach- 
ment sent out the previous day,” 
a pilot fish says. “Apparently, it 
contained the Word B virus.” 


Pilot fish reports that the Web 
site for the Virginia Department 
of Motor Vehicles lists local num- 
bers for patrons to call, followed 
by this message: “Our call center 
is currently closed.” Sharky 
checked it out, and actually, 
that’s a live-update message 
During the day, it almost always 
says — hey, this is the DMV, after 
all - “All customer service repre- 
sentatives are currently busy.” 
Get busy sending me your 

true tales of IT: sharky@ 
computerworld.com. If it 
prints, you get a sharp Shark 
shirt. And get more online daily, 
and the Sharkives, too, at 
computerworld.com/sharky. 
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“Your databace 1s beyond. vepaix; but before T tell you 
our backup recommendation, let me ask you a 
question. How many index canis do you think will fit 

on the walls of your computer room?” 





pentiume/// @ 


xeon... 


AT BUY.clM, 
[BM NEIFINIT 


MAGIC buns 
HE STORE 


era SS SLs 


iPstore with nearly one million pro 

.@ #5OOR running Microsoft® Winde 

2297 

Antel® Pentium® !!) Xeon™ $50 MH 

storage and 32G8 memory 

nesties™ Active™ PCI, Predictive rail 
veb servers — 
; buy (18m Server Start Up Support in 


a5 fagvers. Tetncegy. nna ae Magee. 


a 
@stimated reseller price as of 04/12/00 and does not include hard drive, operating systems or other options. Actua 
ge without notie€.'MHz denotes internal clock speed of the microprocessor only, not application performance; many 
to ey a-fiard disk drive capacity, GB means one billion bytes. Total user accessible capacity’may vary 

‘i tive and the e-business logo are trademarks or registered trademarks of International Business Machines 
S and Xeon is a trademark of Intel Corporation. Other company, product and service names may be trademarks 


Pia 





www. kingston.com/jump/reliable 


GNIDERYER MEMOR 


OE LETT PO est 


WEEE LE ey a 


you stick with it. Thats why more 

mory brand. Because Kingston guarantees 
gorous testing in the industry. By promising 

class of systems it was designed fot 

ruaranteed get you through a lifetime of sunsets 


memory today. Go to www. kingston.com/jump/reliable and register 


ill (800) 259-8965 B. Kingston 


TECH OLOGY 
COMPUTING WITHOUT LIMITS 





